CVE-2018-17843: SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Single CRITICAL 9.8 REMOTE DOWNGRADE DOWNGRADE DOWNGRADE
CVE-2018-17843 is a critical-severity flaw (CVSS 9.8) affecting add clicking mlm software, autopool mlm software, bidding mlm software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0 via the member/readmsg.php msg_id parameter, the member/tree.php pid parameter, or the member/downline.php m_id parameter.
Why this priority Critical severity Remotely exploitable, no login, no user action No fix is published yet: follow the downgrade or mitigation steps.
Risk facts CVSS score 9.8 (Critical) Attack vector Network (remote) Attack complexity Low Privileges needed None User interaction None EPSS exploit chance 2.0% (top 19%) CISA exploited list No Weakness CWE-89 Published 2019-05-24 Last modified 2026-06-17
Share: LinkedIn · X · Reddit
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Timeline 2019-05-24 18:29 UTC Published CVE record published2026-06-17 01:46 UTC Updated Record last modifiedmlmsoftwarez add clicking mlm software DOWNGRADE
Affected: 1.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
Copy apt-cache policy add-clicking-mlm-software || rpm -q add-clicking-mlm-software || add-clicking-mlm-software --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
Copy apt-cache madison add-clicking-mlm-software
sudo apt install add-clicking-mlm-software=<VERSION_BEFORE_1.0>
sudo apt-mark hold add-clicking-mlm-software
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
Copy dnf --showduplicates list add-clicking-mlm-software
sudo dnf downgrade add-clicking-mlm-software-<VERSION_BEFORE_1.0>
sudo dnf versionlock add add-clicking-mlm-software
Downgrade risk
Copy Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Copy Restart the service, and keep the package held until a fixed release ships.
mlmsoftwarez autopool mlm software DOWNGRADE
Affected: 1.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
Copy apt-cache policy autopool-mlm-software || rpm -q autopool-mlm-software || autopool-mlm-software --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
Copy apt-cache madison autopool-mlm-software
sudo apt install autopool-mlm-software=<VERSION_BEFORE_1.0>
sudo apt-mark hold autopool-mlm-software
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
Copy dnf --showduplicates list autopool-mlm-software
sudo dnf downgrade autopool-mlm-software-<VERSION_BEFORE_1.0>
sudo dnf versionlock add autopool-mlm-software
Downgrade risk
Copy Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Copy Restart the service, and keep the package held until a fixed release ships.
mlmsoftwarez bidding mlm software DOWNGRADE
Affected: 1.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
Copy apt-cache policy bidding-mlm-software || rpm -q bidding-mlm-software || bidding-mlm-software --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
Copy apt-cache madison bidding-mlm-software
sudo apt install bidding-mlm-software=<VERSION_BEFORE_1.0>
sudo apt-mark hold bidding-mlm-software
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
Copy dnf --showduplicates list bidding-mlm-software
sudo dnf downgrade bidding-mlm-software-<VERSION_BEFORE_1.0>
sudo dnf versionlock add bidding-mlm-software
Downgrade risk
Copy Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Copy Restart the service, and keep the package held until a fixed release ships.
mlmsoftwarez binary mlm software DOWNGRADE
Affected: 1.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
Copy apt-cache policy binary-mlm-software || rpm -q binary-mlm-software || binary-mlm-software --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
Copy apt-cache madison binary-mlm-software
sudo apt install binary-mlm-software=<VERSION_BEFORE_1.0>
sudo apt-mark hold binary-mlm-software
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
Copy dnf --showduplicates list binary-mlm-software
sudo dnf downgrade binary-mlm-software-<VERSION_BEFORE_1.0>
sudo dnf versionlock add binary-mlm-software
Downgrade risk
Copy Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Copy Restart the service, and keep the package held until a fixed release ships.
mlmsoftwarez gift mlm software DOWNGRADE
Affected: 1.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
Copy apt-cache policy gift-mlm-software || rpm -q gift-mlm-software || gift-mlm-software --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
Copy apt-cache madison gift-mlm-software
sudo apt install gift-mlm-software=<VERSION_BEFORE_1.0>
sudo apt-mark hold gift-mlm-software
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
Copy dnf --showduplicates list gift-mlm-software
sudo dnf downgrade gift-mlm-software-<VERSION_BEFORE_1.0>
sudo dnf versionlock add gift-mlm-software
Downgrade risk
Copy Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Copy Restart the service, and keep the package held until a fixed release ships.
mlmsoftwarez investmen mlm software DOWNGRADE
Affected: 1.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
Copy apt-cache policy investmen-mlm-software || rpm -q investmen-mlm-software || investmen-mlm-software --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
Copy apt-cache madison investmen-mlm-software
sudo apt install investmen-mlm-software=<VERSION_BEFORE_1.0>
sudo apt-mark hold investmen-mlm-software
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
Copy dnf --showduplicates list investmen-mlm-software
sudo dnf downgrade investmen-mlm-software-<VERSION_BEFORE_1.0>
sudo dnf versionlock add investmen-mlm-software
Downgrade risk
Copy Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Copy Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD ·
CVE Program ·
Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems. Quick answers How do I fix CVE-2018-17843? add clicking mlm software: downgrade or apply the listed mitigation; autopool mlm software: downgrade or apply the listed mitigation; bidding mlm software: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2018-17843 being exploited? CVE-2018-17843 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2018-17843 affect? CVE-2018-17843 affects add clicking mlm software, autopool mlm software, bidding mlm software. Severity is critical (CVSS 9.8). SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.
How urgent is CVE-2018-17843? Priority 60/100. Critical severity; Remotely exploitable, no login, no user action
Software pages PHP vulnerabilities
References ← Back to latest CVEs
PatchTheCVE