CVE-2015-5643

critical

Description

The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.

References

http://oss.icz.co.jp/news/?p=1073

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000144

http://jvn.jp/en/jp/JVN66984217/index.html

Details

Source: Mitre, NVD

Published: 2015-10-06

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00602

Detections

Analytics