CVE-2008-4178

HIGH 7.5CVE-2008-4178 · Published 23/09/2008 · updated 16/06/2026

In short

CVE-2008-4178 is a HIGH (CVSS 7.5) vulnerability affecting builder (downline goldmine), new addon (downline goldmine).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
builder downline_goldmine	`= special_category_addon= unknown`	No fix yet
new addon downline_goldmine	`= pro`	No fix yet

Description

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.

References

packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt
packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt · Exploit
packetstormsecurity.org/0809-exploits/newdownline-sql.txt · Exploit
secunia.com/advisories/31812 · Vendor Advisory
securityfocus.com/bid/31169
vupen.com/english/advisories/2008/2992
vupen.com/english/advisories/2008/2993
vupen.com/english/advisories/2008/2994
vupen.com/english/advisories/2008/2995
exchange.xforce.ibmcloud.com/vulnerabilities/45128
exploit-db.com/exploits/6946
exploit-db.com/exploits/6947
exploit-db.com/exploits/6950
exploit-db.com/exploits/6951

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free