CVE-2017-17999: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledgebase/getarticlesuggestion/...

RISE 1.9 - search SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: RISE Ultimate Project Manager 1.9 - SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 30/12/2017 CVE: CVE-2017-17999 Vendor Homepage: http://fairsketch.com/ Version: 1.9 POST...

RISE 1.9 - 'search' SQL Injection

Exploit Title: RISE Ultimate Project Manager 1.9 - SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 30/12/2017 CVE: CVE-2017-17999 Vendor Homepage: http://fairsketch.com/ Version: 1.9 POST /index.php/knowledgebase/getarticlesuggestion/ HTTP/1.1 Host: localhost...

CVE-2017-11181

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable...

CVE-2017-11182

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable...

Cross site scripting

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable...

Cross site scripting

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable...

CVE-2017-11181

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable...

CVE-2017-11182

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable...

RISE Ultimate Project Manager Cross-Site Scripting Vulnerability

Rise Ultimate Project Manager is a web-based project management system, of which the My Profile section is a profile module. A cross-site scripting vulnerability exists in the input field of the My Profile section in Rise Ultimate Project Manager version 1.8. A remote attacker can use this...

CVE-2017-11181

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable...

CVE-2017-11182

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable...

PT-2017-11803

Name of the Vulnerable Software and Affected Versions Rise Ultimate Project Manager version 1.8 Description The issue concerns XSS vulnerabilities found in the Messaging section of the software. Specifically, the Subject and Message fields are vulnerable. Recommendations For Rise Ultimate Project...

PT-2017-11804

Name of the Vulnerable Software and Affected Versions Rise Ultimate Project Manager version 1.8 Description A security issue was discovered in the My Profile section, where all input fields are susceptible to XSS attacks. Recommendations For version 1.8, ensure proper input validation and...

CVE-2017-11182

Rise Ultimate Project Manager v1.8 contains cross-site scripting (XSS) vulnerabilities in the My Profile input fields. All input fields are vulnerable, enabling injection of arbitrary script/HTML. The CVE notes an XSS issue but does not provide exploitation status, impact depth beyond the stated ...

CVE-2017-11181

Rise Ultimate Project Manager v1.8 contains a cross-site scripting (XSS) vulnerability in the Messaging section, specifically the Subject and Message fields. The CNVD entry indicates this can be exploited remotely by injecting arbitrary web script or HTML. No remediation details are provided in t...

CVE-2017-11182: Improper Neutralization of Input During Web Page Generation

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable...

CVE-2017-11181: Improper Neutralization of Input During Web Page Generation

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable...

Rise Ultimate Project Manager 1.8 Cross Site Scripting

Exploit Title: Rise Ultimate Project Manager - Authenticated XSS Date: 2017-07-10 Exploit Author: 8bitsec Vendor Homepage: http://rise.fairsketch.com/ Software Link: https://codecanyon.net/item/rise-ultimate-project-manager/15455641 Version: 1.8 Tested on: Kali Linux 2.0 | Mac OS 10.12.5 Email:...

Harvest: Editing a project (LIMITED)

Hey there, I found out that invited user to a project cannot edit the project settings unless he is a PROJECT MANAGER on it. Now there is an option while editing project to make it BILLABLE OR NOT... When it is NOT billable it is quite impossible to BILL an invoice for it without making it...