Lucene search
+L

5 matches found

CNVD
CNVD
•added 2025/10/31 12:00 a.m.•38 views

Nero Social Networking Site deletemessage.php File SQL Injection Vulnerability

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter messageid in the file /deletemessage.php. An attacker can exploit this...

9.8CVSS7.5AI score0.00478EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/10/27 7:16 p.m.•21 views

CVE-2025-12308

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

9.8CVSS7.1AI score0.00478EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/27 7:02 p.m.•42 views

CVE-2025-12308

Nero Social Networking Site 1.0 contains a SQL injection in /deletemessage.php caused by unsafely manipulating the message_id parameter. Multiple connected sources confirm remote exploitation possibility and public availability of exploits. The issue affects the deletemessage.php component; no fo...

9.8CVSS7.1AI score0.00478EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/10/27 7:02 p.m.•23 views

EUVD-2025-36338

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

7.5CVSS7.1AI score0.00478EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•10 views

CVE-2025-12308: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

9.8CVSS7.1AI score0.00478EPSS
SaveExploits1References6
Rows per page
Query Builder