CVE-2025-7714
Time Based SQLi in Global Medya's PHP CMS
CVSS Score
7.5
EPSS Score
0.1%
EPSS Percentile
27th
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection. This issue affects Content Management System (CMS): through 21072025.
| CWE | CWE-89 |
| Vendor | global interactive design media software inc. |
| Product | content management system (cms) |
| Published | Jan 29, 2026 |
| Last Updated | Jun 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for global interactive design media software inc. content management system (cms)
Be the first to know when new high vulnerabilities affecting global interactive design media software inc. content management system (cms) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Global Interactive Design Media Software Inc. / Content Management System (CMS)
0 ≤ 21072025
References
Credits
Çetin BİNİCİ