CVE-2017-17999: Fairsketch Rise Ultimate Project Manager

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledge_base/get_article_suggestion/.

Affected products

• Fairsketch Rise Ultimate Project Manager: version 1.9 only

Published 2018-01-23. Last modified 2026-06-17.