Paper/Archive/CVE-2025-7714

CVE-2025-7714

Global Interactive Design Media Software Inc. Content Management System (CMS) — Time Based SQLi in Global Medya's PHP CMS

EPSS 0.4%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 31.7.317 × 206.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection. This issue affects Content Management System (CMS): through 21072025.

Affected

ProductAffectedFixed inSource

Content Management System (CMS)≤ 21072025–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

TR-CERT (CNA)7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refusom.gov.tr/bildirim/tr-26-0008 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0008