SQL Injection Vulnerability in WinMatrix3 Web Package by Simopro Technology
CVE-2025-7918
9.3CRITICAL
What is CVE-2025-7918?
The WinMatrix3 Web package developed by Simopro Technology is exposed to a SQL Injection vulnerability that enables unauthenticated remote attackers to execute arbitrary SQL queries. This could allow them to read sensitive data, modify existing records, or delete database entries, posing a significant risk to data integrity and security.
Affected Version(s)
WinMatrix3 Web package 0 <= 1.2.39.5