Lucene search
+L

5 matches found

CNVD
CNVD
•added 2025/10/31 12:00 a.m.•34 views

Nero Social Networking Site deletemessage.php File SQL Injection Vulnerability

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter messageid in the file /deletemessage.php. An attacker can exploit this...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/27 7:16 p.m.•14 views

CVE-2025-12308

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

9.8CVSS5.8AI score0.00478EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 7:02 p.m.•17 views

EUVD-2025-36338

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

7.5CVSS7.2AI score0.00478EPSS
SaveExploits1References7
CVE
CVE
•added 2025/10/27 7:02 p.m.•33 views

CVE-2025-12308

Nero Social Networking Site 1.0 contains a SQL injection in /deletemessage.php caused by unsafely manipulating the message_id parameter. Multiple connected sources confirm remote exploitation possibility and public availability of exploits. The issue affects the deletemessage.php component; no fo...

9.8CVSS7AI score0.00478EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•4 views

CVE-2025-12308: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References1
Rows per page
Query Builder