CVE-2015-5642

ICZ MATCHA INVOICE is affected by multiple SQL injection vulnerabilities (CWE-89) in versions 2.5.6 and earlier, allowing a remote authenticated attacker to obtain or alter information in the database. The issues pertain to the web-based billing management software and are associated with unspeci...