Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2019-25300

thejshen Globitek CMS 1.4 - 'id' SQL Injection

Description

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

thejshen Globitek CMS

  • 1.4affected

References