Skip to content
OpenAdvisories
High · 7.5 CVE-2025-7714 EUVD-2025-206547

Time Based SQLi in Global Medya's PHP CMS

Published Jan 29, 2026 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.

This issue affects Content Management System (CMS): through 21072025.

Affected products

VendorProductAffectedFixed
Global Interactive Design Media Software Content Management System (CMS) ≤ 21072025 —

References