Lucene search
K

4 matches found

CNVD
CNVD
added 2025/10/31 12:0 a.m.2 views

Nero Social Networking Site deletemessage.php File SQL Injection Vulnerability

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter messageid in the file /deletemessage.php. An attacker can exploit this...

9.8CVSS7.8AI score0.00031EPSS
Exploits1References1
OSV
OSV
added 2025/10/27 7:16 p.m.1 views

CVE-2025-12308

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

9.8CVSS5.8AI score
Exploits0References5
EUVD
EUVD
added 2025/10/27 7:2 p.m.1 views

EUVD-2025-36338

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

7.5CVSS7.2AI score0.00031EPSS
Exploits1References7
CVE
CVE
added 2025/10/27 7:2 p.m.5 views

CVE-2025-12308

Nero Social Networking Site 1.0 contains a SQL injection in /deletemessage.php caused by unsafely manipulating the message_id parameter. Multiple connected sources confirm remote exploitation possibility and public availability of exploits. The issue affects the deletemessage.php component; no fo...

9.8CVSS6.7AI score0.00031EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder