Lucene search
Japan Vulnerability NotesJVN:18232032HistorySep 30, 2015 - 12:00 a.m.
JVN#18232032: MATCHA INVOICE vulnerable to SQL injection
2015-09-3000:00:00
Japan Vulnerability Notes
jvn.jp
19
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.002
Percentile
64.8%
MATCHA INVOICE provided by ICZ Corporation is a web-based billing management software. MATCHA INVOICE contains multiple SQL injection (CWE-89) vulnerabilities.
Impact
An authenticated attacker may obtain or alter information stored in the database.
Solution
Update the Software
Update to the latest version according to the information provided by the developer.
Products Affected
- MATCHA INVOICE 2.5.6 and earlier
Related
cvelist
cvelist
CVE-2015-5642
2015-10-03 10:00:00
prion
prion
Sql injection
2015-10-06 01:59:00
cve
cve
CVE-2015-5642
2015-10-06 01:59:21
nvd
nvd
CVE-2015-5642
2015-10-06 01:59:21
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.002
Percentile
64.8%
Related for JVN:18232032