SQL Injection Vulnerability in CodeCanyon RISE Ultimate Project Manager
CVE-2024-8945

8.8HIGH

Key Information:

Vendor

Fairsketch

Status
Rise Ultimate Project Manager
Vendor
CVE Published:
17 September 2024

What is CVE-2024-8945?

A SQL injection vulnerability has been identified in CodeCanyon's RISE Ultimate Project Manager, specifically in the file located at /index.php/dashboard/save. This vulnerability arises from improper handling of the id argument, enabling remote attackers to execute arbitrary SQL queries. The potential exploitation of this vulnerability poses a serious risk to the integrity and confidentiality of the database. Users are strongly advised to upgrade to the latest version of the product to mitigate the threat and protect sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://vuldb.com/?id.277762
https://vuldb.com/?ctiid.277762
https://vuldb.com/?submit.409096

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.