PT-2026-5303 · Global Interactive Design Media Software · Global Interactive Design Media Software Inc. Content Management System

Çetin Bi̇ni̇ci̇ · Published 2026-01-29 · Updated 2026-03-10 · CVE-2025-7714

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Global Interactive Design Media Software Inc. Content Management System (CMS) versions through 21072025

Description A flaw exists in Global Interactive Design Media Software Inc. Content Management System (CMS) that allows Command Line Execution through SQL Injection due to improper neutralization of special elements used in an SQL command. The issue is a SQL Injection.

Recommendations Versions through 21072025 require attention to address the SQL Injection flaw and prevent potential Command Line Execution.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-7714

Affected Products

Global Interactive Design Media Software Inc. Content Management System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-7714 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7714 · Vendor Advisory
• https://usom.gov.tr/bildirim/tr-26-0008 · Note
• https://t.me/cveNotify/154941 · Telegram Post
• https://twitter.com/CVEnew/status/2016890617742188764 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0008 · Note
• https://t.me/CVEtracker/43247 · Telegram Post