CVE-2015-5643

CVE-2015-5643

EPSS 1.3%

The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000144 http://jvn.jp/en/jp/JVN66984217/index.html http://oss.icz.co.jp/news/?p=1073