CVE-2015-5643

CVE-2015-5643

EPSS 1.3%

The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000144 http://jvn.jp/en/jp/JVN66984217/index.html http://oss.icz.co.jp/news/?p=1073