CVE-2025-7714

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.This issue affects Content Management System (CMS): through 21072025.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.usom.gov.tr/bildirim/tr-26-0008	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:globalmedya:content_management_system:*:*:*:*:*:*:*:*

History

10 Mar 2026, 17:56

Type	Values Removed	Values Added
CPE		cpe:2.3:a:globalmedya:content_management_system::::::::
First Time		Globalmedya Globalmedya content Management System
References	~~() https://www.usom.gov.tr/bildirim/tr-26-0008 -~~	() https://www.usom.gov.tr/bildirim/tr-26-0008 - Third Party Advisory
Summary		(es) Vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL (inyección SQL) en el Sistema de Gestión de Contenidos (CMS) de Global Interactive Design Media Software Inc. permite la ejecución de comandos de línea a través de inyección SQL. Este problema afecta al Sistema de Gestión de Contenidos (CMS): hasta el 21072025.

29 Jan 2026, 15:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-01-29 15:16

Updated : 2026-03-10 17:56

NVD link : CVE-2025-7714

Mitre link : CVE-2025-7714

CVE.ORG link : CVE-2025-7714

JSON object : View

Products Affected

globalmedya

content_management_system

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2025-7714", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2026-01-29T15:16:12.330", "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-26-0008", "tags": ["Third Party Advisory"], "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.This issue affects Content Management System (CMS): through 21072025."}, {"lang": "es", "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando SQL (inyecci\u00f3n SQL) en el Sistema de Gesti\u00f3n de Contenidos (CMS) de Global Interactive Design Media Software Inc. permite la ejecuci\u00f3n de comandos de l\u00ednea a trav\u00e9s de inyecci\u00f3n SQL. Este problema afecta al Sistema de Gesti\u00f3n de Contenidos (CMS): hasta el 21072025."}], "lastModified": "2026-03-10T17:56:25.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:globalmedya:content_management_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2418FBF9-B5F0-4051-A7C8-90D65EED3113", "versionEndIncluding": "2025-07-21"}], "operator": "OR"}]}], "sourceIdentifier": "iletisim@usom.gov.tr"}