Vulnerabilities

TI-2026-22143 CVE-2026-27787 · GHSA-wm9p-h6hw-5vx8

Cross-site scripting in ICZ Corporation MATCHA SNS

LOW 22

Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00147 Published 2026-04-08 No fix listed CWE-79

TI-2026-25687 CVE-2026-33273 · GHSA-4w7x-xp7v-5wc2

Unrestricted file upload in ICZ Corporation MATCHA INVOICE

LOW 23

Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00232 Published 2026-04-08 No fix listed CWE-434

TI-2026-20098 CVE-2026-24913 · GHSA-xw7j-84mx-6v67

SQL injection in ICZ Corporation MATCHA INVOICE

LOW 39

SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00286 Published 2026-04-08 No fix listed CWE-89

TI-2015-04759 CVE-2015-5645 · GHSA-7mhj-w5q4-r9hm

ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative…

LOW 31

ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01255 Published 2015-10-03 No fix listed CWE-264

TI-2015-04758 CVE-2015-5644 · GHSA-xvp8-f489-jc35

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database…

LOW 33

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01321 Published 2015-10-03 No fix listed CWE-94

TI-2015-04757 CVE-2015-5643 · GHSA-2mj3-mc6h-qcgc

The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the…

LOW 33

The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01321 Published 2015-10-03 No fix listed CWE-94

TI-2015-04756 CVE-2015-5642 · GHSA-w6v2-vhm7-87p3

Multiple SQL injection vulnerabilities in ICZ MATCHA INVOICE before 2.5.7 allow remote…

LOW 31

Multiple SQL injection vulnerabilities in ICZ MATCHA INVOICE before 2.5.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01049 Published 2015-10-03 No fix listed CWE-89

TI-2012-01135 CVE-2012-1238 · GHSA-xfx4-m9c7-7v6v

Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to…

LOW 22

Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01167 Published 2012-04-06 No fix listed

TI-2012-01134 CVE-2012-1237 · GHSA-6wg8-3f9j-5qcc

Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote…

LOW 31

Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00636 Published 2012-04-06 No fix listed CWE-352

Vulnerabilities

Filters