Description
thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| thejshen | Globitek CMS | 1.4 | — |
References
- ExploitDB-47581 exploit
- Vendor Homepage product
- VulnCheck Advisory: thejshen Globitek CMS 1.4 - 'id' SQL Injection third-party-advisory