WinMatrix3 Web package vulnerabilities

2 known vulnerabilities in WinMatrix3 Web package from Simopro Technology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WinMatrix3 Web package: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-7918Jul 21, 2025Simopro Technology

  WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

• 7.2 High severity

  WinMatrix3 Web package: Unrestricted Upload of File with Dangerous Type

  CVE-2025-7917Jul 21, 2025Simopro Technology

  WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.