CVE-2015-5644

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.

• CWE-94

• http://jvn.jp/en/jp/JVN08535069/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000145Vendor Advisory
• http://oss.icz.co.jp/news/?p=1075Vendor Advisory
• http://jvn.jp/en/jp/JVN08535069/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000145Vendor Advisory
• http://oss.icz.co.jp/news/?p=1075Vendor Advisory

Published

Oct 6, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5638Directory traversal vulnerability in H2O before 1.4.5 and 1.…
• CVE-2015-5639niconico App for iOS before 6.38 does not verify SSL certifi…
• CVE-2015-5640baserCMS before 3.0.8 allows remote authenticated users to m…
• CVE-2015-5641SQL injection vulnerability in baserCMS before 3.0.8 allows …
• CVE-2015-5642Multiple SQL injection vulnerabilities in ICZ MATCHA INVOICE…
• CVE-2015-5643The installer in ICZ MATCHA INVOICE before 2.5.7 does not pr…
• CVE-2015-5645ICZ MATCHA SNS before 1.3.7 allows remote authenticated user…
• CVE-2015-5646Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows…
• CVE-2015-5647The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 …
• CVE-2015-5648SQL injection vulnerability in list.php in phpRechnung befor…
• CVE-2015-5649Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishan…
• CVE-2015-5650Directory traversal vulnerability in AjaXplorer 2.0 allows r…