{"id":"CVE-2025-7714","aliases":["EUVD-2025-206547","GHSA-w5j9-7246-9cpx"],"status":"published","title":"Time Based SQLi in Global Medya's PHP CMS","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.\n\nThis issue affects Content Management System (CMS): through 21072025.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00374,"percentile":0.31593,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2026-01-29T14:44:12Z","modified":"2026-06-17T10:05:30Z","products":[{"vendor":"global interactive design media software inc.","product":"content management system (cms)"},{"vendor":"globalmedya","product":"content_management_system"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-26-0008","tags":["government-resource","broken-link","Third Party Advisory"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0008","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7714"},{"url":"https://github.com/advisories/GHSA-w5j9-7246-9cpx"}],"sources":{"cve":[{"id":"CVE-2025-7714","title":"Time Based SQLi in Global Medya's PHP CMS","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.\n\nThis issue affects Content Management System (CMS): through 21072025.","status":"published","published":"2026-01-29T14:44:12.46Z","modified":"2026-06-05T13:38:20.848Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:51.880027Z"}],"euvd":[{"id":"EUVD-2025-206547","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.\n\nThis issue affects Content Management System (CMS): through 21072025.","status":"published","published":"2026-01-29T14:44:12Z","modified":"2026-06-05T13:38:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:51.774493Z"}],"ghsa":[{"id":"GHSA-w5j9-7246-9cpx","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.This issue affects Content Management System (CMS): through 21072025.","status":"published","published":"2026-01-29T15:30:28Z","modified":"2026-06-05T15:32:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:08:34.957049Z"}],"nvd":[{"id":"CVE-2025-7714","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.\n\nThis issue affects Content Management System (CMS): through 21072025.","status":"published","published":"2026-01-29T15:16:12.33Z","modified":"2026-06-17T10:05:30.95Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:59.073638Z"}]}}