CVE-2015-5644

critical

Description

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-5595

http://oss.icz.co.jp/news/?p=1075

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000145

http://jvn.jp/en/jp/JVN08535069/index.html

Details

Source: Mitre, NVD

Published: 2015-10-06

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01321

Detections

Analytics