CVE-2024-8945

MEDIUM

Fairsketch Rise Ultimate Project Manager - SQL Injection

Title source: rule

Description

A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unknown code of the file /index.php/dashboard/save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

Exploits (1)

exploitdb WORKING POC
by Jobyer From Bytium · pythonwebappsphp
https://www.exploit-db.com/exploits/52100

References (4)

Scores

CVSS v3 5.5
EPSS 0.0112
EPSS Percentile 78.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Details

CWE
CWE-89
Status published
Products (1)
fairsketch/rise_ultimate_project_manager 3.7.0
Published Sep 17, 2024
Tracked Since Feb 18, 2026