Published: 23/09/2008 Updated: 29/09/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 770

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote malicious users to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
downline goldmine new addon
downline goldmine builder special_category_addon
downline goldmine builder
downline goldmine builder unknown
downline goldmine new addon pro

Downline Goldmine Builder (trphp id) Remote SQL Injection Vulnerability ___________________________________ Author: Hussin X Home : wwwIQ-TYcom & wwwTrYaGcc ___________________________________ script :wwwdownlinegoldminecom/ DorK :inurl:trphp?id= Exploit : _______ trphp?id=-1+union+select+1,2,3,concat_ws(0x3a,user( ...

Category Addon (trphp id) Remote SQL Injection Vulnerability ___________________________________ Author: Hussin X Home : wwwIQ-TYcom & wwwTrYaGcc ___________________________________ script : wwwdownlinegoldminecom/ DorK : inurl:trphp?id= Exploit : _______ trphp?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),versio ...

paidversion (trphp id) Remote SQL Injection Vulnerability ___________________________________ Author: Hussin X Home : wwwIQ-TYcom & wwwTrYaGcc ___________________________________ script : wwwdownlinegoldminecom/ DorK : inurl:trphp?id= Exploit : _______ trphp?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version() ...

newdownlinebuilder (trphp id) Remote SQL Injection Vulnerability ___________________________________ Author: Hussin X Home : wwwIQ-TYcom & wwwTrYaGcc ___________________________________ script : wwwdownlinegoldminecom/ DorK : inurl:trphp?id= Exploit : _______ trphp?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),ve ...

CWE-89 http://www.securityfocus.com/bid/31169 http://packetstormsecurity.org/0809-exploits/newdownline-sql.txt http://secunia.com/advisories/31812 http://packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt http://packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt http://www.vupen.com/english/advisories/2008/2993 http://www.vupen.com/english/advisories/2008/2995 http://www.vupen.com/english/advisories/2008/2992 http://www.vupen.com/english/advisories/2008/2994 https://exchange.xforce.ibmcloud.com/vulnerabilities/45128 https://www.exploit-db.com/exploits/6951 https://www.exploit-db.com/exploits/6950 https://www.exploit-db.com/exploits/6947 https://www.exploit-db.com/exploits/6946 https://nvd.nist.gov https://www.exploit-db.com/exploits/6946/

CVE-2008-4178

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect