Read the docs

Simopro Technology

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Simopro Technology records in CISA KEV

No Simopro Technology vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Winmatrix3 · all components

Priority MEDIUM 50

The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database conte…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00685 Published 2024-07-29 No fix listed CWE-89
Priority MEDIUM 44

The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database conte…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00685 Published 2024-07-29 No fix listed CWE-89
Open these records in search →