CVE-2024-8945

MEDIUM

CodeCanyon RISE Ultimate Project Manager save sql injection

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-8945 has a selected CVSS score of 5.3 (medium); EIP currently links 1 catalogued exploit.

Description

A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unknown code of the file /index.php/dashboard/save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 18, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

RISE Ultimate Project Manager

Browse CodeCanyon / RISE Ultimate Project Manager

Default status: unknown

CVE List3.7.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBCodeCanyon RISE CRM 3.7.0 - SQL InjectionExploitDB exploitby Jobyer From BytiumNot analyzed1 file
ExploitDB
PoC details

References

5