8.5
High
CVE-2025-60108 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a through <= 3.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LambertGroup - AllInOne - Banner with Thumbnails 3.8 | earliest → 3.8 | No fix stated |