Approved changes feed: RSS · Atom

cpe:2.3:a:simopro_technology:winmatrix3_web_package:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSimopro Technology (4c54571d-18e8-5865-a539-c8812a80d814)
ProductWinmatrix3 Web Package (57128f69-f5cd-5328-ad16-b3f3b405dacf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7920 vulnerable 2026-06-08 07:45:18.508479 Simopro Technology|WinMatrix3 Web package - Reflected Cross-Site Scripting
MEDIUM (6.1)
WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Published: 2025-07-21T06:59:23.110Z
Updated: 2025-07-21T15:25:35.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7919 vulnerable 2026-06-08 07:45:18.508198 Simopro Technology|WinMatrix3 Web package - SQL Injection
MEDIUM (6.5)
WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Published: 2025-07-21T06:16:00.562Z
Updated: 2025-07-21T15:28:33.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7918 vulnerable 2026-06-08 07:45:18.507830 Simopro Technology|WinMatrix3 Web package - SQL Injection
CRITICAL (9.8)
WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Published: 2025-07-21T06:12:49.798Z
Updated: 2025-07-21T15:39:22.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7917 vulnerable 2026-06-08 07:45:18.507275 Simopro Technology|WinMatrix3 Web package - Arbitrary File Upload
HIGH (7.2)
WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Published: 2025-07-21T06:08:38.612Z
Updated: 2025-07-21T15:39:46.038Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.