CVE-2025-12307

A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly...

CVE-2025-12307 code-projects Nero Social Networking Site addfriend.php sql injection

A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly...

CVE-2025-12307

Nero Social Networking Site 1.0 contains a SQL injection in /addfriend.php triggered by manipulating the ID parameter. The vulnerability is exploitable remotely, with publicly available PoCs. CNVD/CNNVD/Red Hat and related entries describe exploitation that can lead to unauthorized database acces...