- Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection.This issue affects Content Management System (CMS): through 21072025.
- Source
- iletisim@usom.gov.tr
- NVD status
- Analyzed
- Products
- content_management_system
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- iletisim@usom.gov.tr
- CWE-89
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:globalmedya:content_management_system:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2418FBF9-B5F0-4051-A7C8-90D65EED3113",
"versionEndIncluding": "2025-07-21",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]