A vulnerability was found in thejshen Globitek CMS 1.4. It has been declared as critical. This affects an unknown part of the component GET Parameter Handler. The manipulation of the argument ID results in sql injection.

This vulnerability is reported as CVE-2019-25300. The attack can be launched remotely. Moreover, an exploit is present.