CVE-2025-7714 - CVE House

Back to Database

Status published High CVE-2025-7714

Time Based SQLi in Global Medya's PHP CMS

7.5 CVSS

Vulnerability Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection. This issue affects Content Management System (CMS): through 21072025.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7714

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Çetin BİNİCİ

References

More from Global Interactive Design Media Software Inc.

View All →

Reflected XSS in Global Medya's PHP CMS

Affected Vendor

Global Interactive Design Media Software Inc.

View all reports →

Affected Software

Content Management System (CMS)

Vulnerable Versions:

0

Timeline

Official Publish: January 29th, 2026

Last Modified: June 5th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1213.006 Databases

T1485 Data Destruction