CVE-2015-5644

CVE-2015-5644

EPSS 1.3%

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000145 http://jvn.jp/en/jp/JVN08535069/index.html http://oss.icz.co.jp/news/?p=1075