Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3m98-cmhq-pc7h

Опубликовано: 06 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 7.1

Описание

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information.

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information.

EPSS

Процентиль: 6%
0.00024
Низкий

7.1 High

CVSS4

7.1 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.1
nvd
3 дня назад

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information.

EPSS

Процентиль: 6%
0.00024
Низкий

7.1 High

CVSS4

7.1 High

CVSS3

Дефекты

CWE-89