Skip to content
OpenAdvisories

Vendor

TPC Software

7 known vulnerabilities.

Products

Matchpoint 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-111493

    Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint

    Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be downloaded using predictable identifiers. An unauthenticated remote attacker could enumerate these identifiers and collect users' photos. Lin…

    TPC Software Matchpoint
  • High 8.6
    CVE-2026-111492

    SQL injection in the push notification handler of the MatchPoint Android app

    SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries by concatenating untrusted data. An attacker capable of interacting with the component could manipulate…

    TPC Software Matchpoint