CVE-2020-37004

Ultimate Project Manager CRM PRO 2.0.5 contains a blind SQL injection vulnerability that allows attackers to extract usernames and password hashes from the tblusers database table. Attackers can exploit the /frontend/getarticlesuggestion/ endpoint by crafting malicious search parameters to...

PT-2018-6603

Name of the Vulnerable Software and Affected Versions: RISE Ultimate Project Manager version 1.9 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the search parameter in the "index.php/knowledge base/get article...