Lucene search
K

43 matches found

RedhatCVE
RedhatCVE
added 2025/11/18 1:5 p.m.6 views

CVE-2025-13279

A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and...

8.8CVSS6.3AI score0.00308EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/17 3:30 p.m.4 views

EUVD-2025-197792

A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and...

6.5CVSS6.4AI score0.00308EPSS
Exploits1References7
OSV
OSV
added 2025/11/17 1:15 p.m.1 views

CVE-2025-13279

A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and...

8.8CVSS5.7AI score0.00308EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/11/17 12:32 p.m.11 views

CVE-2025-13279 code-projects Nero Social Networking Site profilefriends.php sql injection

A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and...

6.5CVSS6.7AI score0.00308EPSS
Exploits1References6
CVE
CVE
added 2025/11/17 12:32 p.m.11 views

CVE-2025-13279

CVE-2025-13279 affects Nero Social Networking Site 1.0. The vulnerability is in profilefriends.php, where manipulating the ID parameter enables SQL injection due to lack of input validation. Exploitation can be conducted remotely, and public exploit code exists. Multiple colocated sources confirm...

8.8CVSS6.4AI score0.00308EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2025/11/17 12:15 p.m.3 views

CVE-2025-13277

A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

9.8CVSS0.00385EPSS
Exploits1References5
OSV
OSV
added 2025/11/17 12:15 p.m.1 views

CVE-2025-13277

A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

9.8CVSS5.7AI score0.00385EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 11:32 a.m.6 views

CVE-2025-13277 code-projects Nero Social Networking Site friendsphoto.php sql injection

A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.6AI score0.00385EPSS
Exploits1References5
CVE
CVE
added 2025/11/17 11:32 a.m.6 views

CVE-2025-13277

CVE-2025-13277 affects Nero Social Networking Site 1.0. The vulnerability is a SQL injection in the /friendsphoto.php file, triggered by manipulating the ID parameter. It allows remote exploitation and has publicly published exploits. Connected sources (CNVD-2025-30209, RH-CVE, CNNVD, PT-2025-471...

9.8CVSS7.1AI score0.00385EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

Code-Projects Nero Social Networking Site SQL注入漏洞

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /friendsphoto.php. An attacker can exploit this vulnerability t...

9.8CVSS7.8AI score0.00385EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.3 views

PT-2025-47140

Name of the Vulnerable Software and Affected Versions Nero Social Networking Site version 1.0 Description A flaw exists in the processing of the /friendsphoto.php file within the software. Manipulation of the ID argument can lead to a SQL injection. This issue can be exploited remotely. The explo...

9.8CVSS6.8AI score0.00385EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

Code-Projects Nero Social Networking Site SQL注入漏洞

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID in the file /profilefriends.php. An attacker can exploit this vulnerability...

8.8CVSS7AI score0.00308EPSS
Exploits1References6
CNVD
CNVD
added 2025/10/31 12:0 a.m.4 views

Nero Social Networking Site acceptoffres.php File SQL Injection Vulnerability

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID in the file /acceptoffres.php. An attacker can exploit this vulnerability t...

9.8CVSS7.9AI score0.00394EPSS
Exploits1References1
CNVD
CNVD
added 2025/10/31 12:0 a.m.3 views

Nero Social Networking Site deletemessage.php File SQL Injection Vulnerability

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter messageid in the file /deletemessage.php. An attacker can exploit this...

9.8CVSS7.8AI score0.00394EPSS
Exploits1References1
CNVD
CNVD
added 2025/10/31 12:0 a.m.1 views

Nero Social Networking Site friendprofile.php File SQL Injection Vulnerability

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /friendprofile.php. An attacker can exploit this...

9.8CVSS7.8AI score0.00394EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 7:53 p.m.4 views

CVE-2025-12309

A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to t...

9.8CVSS7.1AI score0.00394EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 7:53 p.m.4 views

CVE-2025-12308

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

9.8CVSS7AI score0.00394EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/27 9:30 p.m.3 views

EUVD-2025-36342

A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to t...

7.5CVSS7.2AI score0.00394EPSS
Exploits1References7
OSV
OSV
added 2025/10/27 7:16 p.m.2 views

CVE-2025-12308

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. Th...

9.8CVSS5.8AI score
Exploits0References5
OSV
OSV
added 2025/10/27 7:16 p.m.2 views

CVE-2025-12307

A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly...

9.8CVSS5.8AI score0.00394EPSS
Exploits1References5
Rows per page
Query Builder