CVE-2025-7919CWE-200

Simopro Technology｜WinMatrix3 Web package - SQL Injection

High · published July 21, 2025

CVSS v4.0
7.1
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00492 · 41.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-07-21T06:16Z
EPSS history
Timeline
  • 21 JUL 06:16Z
    Simopro Technology｜WinMatrix3 Web package - SQL Injection
    cvelistv5