CVE-2015-5644

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.

Score

CVSS 2.0 6.8 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2015-10-06

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Matchasns (Icz)

References

• http://jvn.jp/en/jp/JVN08535069/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000145
• http://oss.icz.co.jp/news/?p=1075