CVE-2019-25300: Thejshen Globitek CMS

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information.

Affected products

• Thejshen Globitek CMS: version 1.4 only

Published 2026-02-06. Last modified 2026-06-17.