CVE-2025-7918 in WinMatrix3 Web package

Riassunto

di MITRE • 21/07/2025

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Twcert
• Prenotare: 21/07/2025
• Divulgazione: 21/07/2025
• Moderazione: accettato
• Voce: VDB-317069
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 9.8 (CNA)
• EPSS: 0.00430
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-7918
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-7918
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-7918/