CVE-2025-7714
Time Based SQLi in Global Medya's PHP CMS
- State
- Published
- Severity
- 7.5 High
- Published
- Jan 29, 2026
- Updated
- Jun 5, 2026
- Reserved
- Jul 16, 2025
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.
This issue affects Content Management System (CMS): through 21072025.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | TR-CERT |
Weaknesses
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected Products
| Product | Versions |
|---|---|
Content Management System (CMS)Global Interactive Design Media Software Inc. |
|
References
- https://www.usom.gov.tr/bildirim/tr-26-0008government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0008government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.