Unscored CVE-2015-5642 EUVD-2015-5593GHSA-w6v2-vhm7-87p3

Multiple SQL injection vulnerabilities in ICZ MATCHA INVOICE before 2.5.7 allow remote authenticated users to execute arbitrary SQL command…

Published Oct 3, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Multiple SQL injection vulnerabilities in ICZ MATCHA INVOICE before 2.5.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References

JVNDB-2015-000143 third-party-advisory
JVN#18232032 third-party-advisory
http://oss.icz.co.jp/news/?p=1073