{"id":"CVE-2025-7714","state":"PUBLISHED","title":"Time Based SQLi in Global Medya's PHP CMS","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.\n\nThis issue affects Content Management System (CMS): through 21072025.","publishedAt":"2026-01-29T14:44:12.460Z","updatedAt":"2026-06-05T13:38:20.848Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"TR-CERT"},"assigner":"TR-CERT","products":["Global Interactive Design Media Software Inc. Content Management System (CMS)"],"affected":[{"vendor":"Global Interactive Design Media Software Inc.","product":"Content Management System (CMS)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"21072025","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-26-0008","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0008"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/7xxx/CVE-2025-7714.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-7714","state":"PUBLISHED","datePublished":"2026-01-29T14:44:12.460Z","dateUpdated":"2026-06-05T13:38:20.848Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2025-07-16T14:51:01.327Z"},"containers":{"cna":{"title":"Time Based SQLi in Global Medya's PHP CMS","descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.\n\nThis issue affects Content Management System (CMS): through 21072025."}],"affected":[{"vendor":"Global Interactive Design Media Software Inc.","product":"Content Management System (CMS)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"21072025","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-26-0008","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0008","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":7.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-05T13:38:20.848Z"},"datePublic":"2026-01-29T14:40:00.000Z","impacts":[{"capecId":"CAPEC-108","descriptions":[{"lang":"en","value":"CAPEC-108 Command Line Execution through SQL Injection"}]}],"credits":[{"lang":"en","value":"Çetin BİNİCİ","type":"finder"}],"source":{"defect":["TR-26-0008"],"advisory":"TR-26-0008","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-29T15:54:22.056330Z","id":"CVE-2025-7714","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-29T15:54:30.342Z"}}]}}}