Skip to content
OpenAdvisories

Vendor

Simopro Technology

8 known vulnerabilities.

Products

WinMatrix3 Web package 4 WinMatrix3 3 WinMatrix 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-7918

    Simopro Technology｜WinMatrix3 Web package - SQL Injection

    WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

    Simopro Technology WinMatrix3 Web package
  • Critical 9.8
    CVE-2025-7916

    Simopro Technology｜WinMatrix3 - Insecure Deserialization

    WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents.

    Simopro Technology WinMatrix3
  • Critical 9.8
    CVE-2024-7202

    Simopro Technology WinMatrix3 Web package - SQL Injection

    The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.

    Simopro Technology WinMatrix3
  • Critical 9.8
    CVE-2024-7201

    Simopro Technology WinMatrix3 Web package - SQL Injection

    The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.

    Simopro Technology WinMatrix3