CVE-2019-25300CWE-89

thejshen Globitek CMS 1.4 - 'id' SQL Injection

High · published February 6, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

⚡ One sneaky query can open the floodgates! The Globitek CMS 1.4 is vulnerable to SQL injection through its 'id' GET parameter, letting attackers twist and turn database commands like a magician with a deck of cards. 🎩 Think of it like a restaurant where anyone can swap the chef's secret recipe with their own — if they know just the right words. An attacker could craft a special request that tricks the database into revealing or altering sensitive information, just like a mischievous diner changing the menu! This SQL injection vulnerability is absolutely devastating; an attacker could potentially extract sensitive user data, modify database records, or even wipe entire tables clean like an eraser on a chalkboard. If left unchecked, this could lead to significant data breaches or system disruptions. Protect your data before the dinner bell rings!

Put simply

Think of it like a restaurant where anyone can swap the chef's secret recipe with their own — if they know just the right words. An attacker could craft a special request that tricks the database into revealing or altering sensitive information, just like a mischievous diner changing the menu! The Globitek CMS 1.4 SQL injection flaw allows attackers to manipulate database queries via the 'id' parameter, exploiting techniques like boolean-based, time-based, and UNION-based injections. This means they can send specially crafted requests that trick the CMS into executing malicious SQL commands.

What to do

This SQL injection vulnerability is absolutely devastating; an attacker could potentially extract sensitive user data, modify database records, or even wipe entire tables clean like an eraser on a chalkboard. If left unchecked, this could lead to significant data breaches or system disruptions. Protect your data before the dinner bell rings! Immediately update to the latest version of Globitek CMS that addresses this vulnerability. Additionally, implement prepared statements and parameterized queries to safeguard against such attacks in the future. Regularly audit your database interactions to ensure no rogue queries slip through! You've got this! With these steps, you can easily lock down your CMS and secure your data. 🛡️

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00248 · 15.2th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-02-06T16:41Z
EPSS history
Timeline
  • 06 FEB 16:41Z
    thejshen Globitek CMS 1.4 - 'id' SQL Injection
    cvelistv5