Icz

9 CVEs across 4 Icz products. Browse Icz vulnerabilities, severities, and proof-of-concept exploits.

Icz products with known CVEs

ProductCVEs
Matchasns4
Matcha Invoice2
Sencha Sns2
Matcha Sns1
Icz CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-33273High7.22026-04-08Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be…
CVE-2026-27787Medium5.42026-04-08Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web b…
CVE-2026-24913High8.82026-04-08SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained…
CVE-2015-56452015-10-06ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors.
CVE-2015-56442015-10-06The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecif…
CVE-2015-56432015-10-06The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unsp…
CVE-2015-56422015-10-06Multiple SQL injection vulnerabilities in ICZ MATCHA INVOICE before 2.5.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified ve…
CVE-2012-12382012-04-06Session fixation vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack web sessions via unspecified vectors.
CVE-2012-12372012-04-06Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users.