CVE-2025-7714

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection. This issue affects Content Management System (CMS): through 21072025.

Score

CVSS 3.1 9.8 Critical

Status

Modified - iletisim@usom.gov.tr

Published

2026-01-29

Last modified

2026-06-05

Weaknesses

CWE-89

Affected products

• Content Management System Cms (Global Interactive Design Media Software Inc.)
• Content Management System (Globalmedya)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0008
• https://www.usom.gov.tr/bildirim/tr-26-0008