2 matches found
CVE-2025-32290: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Sticky HTML5 Music Player lbg-audio3-html5 allows SQL Injection.This issue affects Sticky HTML5 Music Player: from n/a through = 3.1.6...
8.5CVSS5.8AI score0.00321EPSS
SaveExploits0References1
PT-2025-21687 · Lambertgroup · Lambertgroup Sticky Html5 Music Player
Name of the Vulnerable Software and Affected Versions: LambertGroup Sticky HTML5 Music Player versions 3.1.6 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...
8.5CVSS9.1AI score0.00321EPSS
SaveExploits0References4
20