CVE-2025-13279: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and...

CVE-2025-13277: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-12306: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and...

CVE-2025-12309: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to t...

CVE-2025-12308: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-12307: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly...

PT-2025-18964 · Unknown · Code-Projects Social Networking Site

Name of the Vulnerable Software and Affected Versions: code-projects Nero Social Networking Site version 1.0 Description: A critical vulnerability was found in the code-projects Nero Social Networking Site. This affects an unknown part of the file /index.php. The manipulation of the arguments...