PT-2008-5477 · Downlinegoldmine · Downline Builder Pro+3

Hussin X

·

Publicado

2008-09-23

·

Atualizado

2017-09-29

·

CVE-2008-4178

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions DownlineGoldmine Special Category Addon version not specified Downline Builder Pro version not specified New Addon version not specified Downline Goldmine Builder version not specified
Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the tr.php file.
Recommendations For DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder, avoid using the id parameter in the tr.php file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-4178

Produtos afetados

Downline Builder Pro
Downline Goldmine Builder
Downlinegoldmine Special Category Addon
New Addon