CVE:CVE-2008-4178
CNNVD:CNNVD-200809-294
DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, 和 Downline Goldmine Builder的tr.php中存在SQL注入漏洞。远程攻击者可以通过id参数来执行任意SQL命令。
solution:Upgrade downline_goldmine builder to a higher version than *,special_category_addon,unknown:unknown,and avoid the version special_category_addon,unknown:unknown; Upgrade downline_goldmine new_addon to a higher version than *,pro,and avoid the version pro