CVE-2025-7919

Summary

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Affected Software

Weaknesses

• CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.twcert.org.tw/tw/cp-132-10259-b4b38-1.html
• https://www.twcert.org.tw/en/cp-139-10264-6c4b7-2.html

• ←Previous
• Next→