CVE-2008-4178
Downline Goldmine Builder and Addons - SQL Injection via id Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-4178. PoCs published by Hussin X.
AI-analyzed exploit summary This is a SQL injection exploit targeting the 'tr.php' script in the 'paidversion' software. It uses a UNION-based SQLi to extract database information including user, version, and database name.
Description
SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.
Exploits (4)
This is a SQL injection exploit targeting the 'tr.php' script in the 'paidversion' software. It uses a UNION-based SQLi to extract database information including user, version, and database name.
This exploit demonstrates a SQL injection vulnerability in the 'tr.php' script of the New Downline Builder software. The PoC uses a UNION-based SQLi to extract database information, including user, version, and database name.
This exploit demonstrates a SQL injection vulnerability in the 'tr.php' script of the Category Addon software. The PoC uses a UNION-based SQLi to extract database information including user, version, and database name.
This exploit demonstrates a SQL injection vulnerability in Downline Goldmine Builder via the 'id' parameter in tr.php. The payload uses a UNION-based attack to extract database information including user, version, and database name.