A SQL injection vulnerability in the Globitek CMS allows authenticated attackers to manipulate database queries, posing a significant risk of unauthorized data extraction.

This is a SQL injection flaw located in the id GET parameter of the application. The vulnerability requires the attacker to have at least low-level authenticated access to trigger the malicious database queries.

Successful exploitation allows an attacker to interact directly with the backend database, potentially leading to the unauthorized disclosure or modification of sensitive information. Given the CVSS score of 7.1, this vulnerability presents a high risk to data confidentiality and integrity, which could result in significant reputational damage or regulatory compliance failures.

Immediate Action: As no official patch is currently available, users should restrict access to the vulnerable application to trusted personnel only and consider implementing input validation routines to sanitize the id parameter.

Proactive Monitoring: Security teams should monitor database logs for anomalous query patterns, specifically looking for SQL keywords or time-based delay commands associated with injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting GET parameters.

Public Exploit Available: Yes, a functional exploit proof-of-concept exists via the Exploit-DB entry (EDB-ID 47581).

The presence of a publicly available proof-of-concept elevates the risk of this vulnerability significantly. Organizations currently utilizing Globitek CMS 1.4 should prioritize isolating the application from public networks or applying custom input sanitization filters to mitigate the risk of exploitation until an official vendor update is released.