← Vulnerability feed

Vulnerability record · CVE-2024-8945 · published 17 September 2024

CVE-2024-8945: Fairsketch rise ultimate project manager sql injection vulnerability

Fairsketch · Rise Ultimate Project Manager

A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unknown code of the file /index.php/dashboard/save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

5.3 CVSS 4.0 Medium EPSS 16% · top 3.2% CWE-89 · SQL injection
5.3CVSS 4.0 base score, v2 6.5
16%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unknown code of the file /index.php/dashboard/save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://bytium.com/sql-injection-vulnerability-identified-in-rise-crm/ ExploitThird Party Advisory
https://vuldb.com/?ctiid.277762 Permissions RequiredVDB Entry
https://vuldb.com/?id.277762 Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.409096 Third Party AdvisoryVDB Entry

Track CVE-2024-8945 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-17999Fairsketch rise ultimate project manager sql injection vulnerabilitySQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter t…EPSS 3.3%8.1CVE-2025-60378Fairsketch rise ultimate project manager cross-site scripting vulnerabilityStored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected…EPSS 1.1%6.9CVE-2024-0545Fairsketch rise ultimate project manager open redirect vulnerabilityA vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerability affects unknown code of the…EPSS 0.48%6.5CVE-2025-63293Fairsketch rise ultimate project manager missing authorization vulnerabilityFairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload…EPSS 0.35%6.1CVE-2025-56807Fairsketch rise ultimate project manager cross-site scripting vulnerabilityA cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payl…EPSS 0.23%5.4CVE-2017-11181Fairsketch rise ultimate project manager cross-site scripting vulnerabilityIn Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable.EPSS 0.66%5.4CVE-2017-11182Fairsketch rise ultimate project manager cross-site scripting vulnerabilityIn Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable.EPSS 0.80%5.3CVE-2025-3855Fairsketch rise ultimate project manager vulnerabilityA vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown fun…EPSS 0.48%

Source: NIST National Vulnerability Database (record CVE-2024-8945), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.