Overview
A critical security vulnerability, identified as CVE-2025-60108, has been discovered within LambertGroup’s AllInOne – Banner with Thumbnails product. This vulnerability, related to the improper neutralization of special elements used in SQL commands, allows an attacker to perform a Blind SQL Injection, potentially leading to a system compromise or data leakage.
This vulnerability is of significant concern due to its broad impact scope, affecting all versions of the AllInOne – Banner with Thumbnails product through 3.8. It is particularly relevant to organizations that utilize this product in their web applications, as it can potentially compromise sensitive data.
Vulnerability Summary
CVE ID: CVE-2025-60108
Severity: High (CVSS: 8.5)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: System compromise, potential data leakage
Affected Products
Escape the Surveillance Era
Most apps won’t tell you the truth.
They’re part of the problem.
Phone numbers. Emails. Profiles. Logs.
It’s all fuel for surveillance.
Ameeba Chat gives you a way out.
- • No phone number
- • No email
- • No personal info
- • Anonymous aliases
- • End-to-end encrypted
Chat without a trace.
Product | Affected Versions
LambertGroup – AllInOne – Banner with Thumbnails | Up to 3.8
How the Exploit Works
The CVE-2025-60108 vulnerability allows an attacker to inject malicious SQL statements into the application. This is possible due to the application’s failure to properly sanitize user-supplied input before it’s incorporated into an SQL query. The attacker can exploit this vulnerability to manipulate the structure of the query, ultimately allowing them to interfere with the application’s database directly.
Conceptual Example Code
Here’s a conceptual example of how an attacker might exploit this vulnerability:
POST /banner_with_thumbnails/endpoint HTTP/1.1
Host: target.example.com
Content-Type: application/x-www-form-urlencoded
id=1' OR '1'='1'; --In this example, the attacker sends a POST request to the application’s endpoint. Instead of a legitimate `id` value, they inject an SQL payload (`1′ OR ‘1’=’1′; –`). This payload modifies the query so that it always returns a true condition, potentially revealing sensitive data or allowing further exploitation.
Mitigation and Remediation
LambertGroup has released a patch to address this vulnerability. All users of the AllInOne – Banner with Thumbnails product are strongly urged to apply this patch immediately. For temporary mitigation, organizations can implement a Web Application Firewall (WAF) or Intrusion Detection System (IDS) to detect and prevent exploitation of this vulnerability. However, these measures should not replace the application of the official patch.
