CVE-2025-4250

The CVE-2025-4250 entry concerns Nero Social Networking Site 1.0, where the vulnerability is an SQL injection affecting an unknown portion of /index.php. The root cause is the manipulation of multiple parameters (fname, lname, login, password2, cpassword, address, cnumber, email, gender, propic, ...

CVE-2025-13279

CVE-2025-13279 affects Nero Social Networking Site 1.0. The vulnerability is in profilefriends.php, where manipulating the ID parameter enables SQL injection due to lack of input validation. Exploitation can be conducted remotely, and public exploit code exists. Multiple colocated sources confirm...

CVE-2025-12309

CVE-2025-12309 concerns code-projects Nero Social Networking Site 1.0. The SQL injection vulnerability arises from lack of validation of the ID parameter in /friendprofile.php, enabling remote manipulation of SQL statements. Multiple connected sources (CNVD, CNNVD, Red Hat, ENISA, NVD, etc.) desc...

CVE-2025-12307

Nero Social Networking Site 1.0 contains a SQL injection in /addfriend.php triggered by manipulating the ID parameter. The vulnerability is exploitable remotely, with publicly available PoCs. CNVD/CNNVD/Red Hat and related entries describe exploitation that can lead to unauthorized database acces...

CVE-2025-12308

Nero Social Networking Site 1.0 contains a SQL injection in /deletemessage.php caused by unsafely manipulating the message_id parameter. Multiple connected sources confirm remote exploitation possibility and public availability of exploits. The issue affects the deletemessage.php component; no fo...

CVE-2025-12306

Nero Social Networking Site 1.0 is affected by a SQL injection in the /acceptoffres.php file, caused by unsafely handling the ID parameter. The vulnerability enables remote attacker exploitation; multiple sources confirm the issue and indicate exploitation has been publicly disclosed. The records...

CVE-2025-13277

CVE-2025-13277 affects Nero Social Networking Site 1.0. The vulnerability is a SQL injection in the /friendsphoto.php file, triggered by manipulating the ID parameter. It allows remote exploitation and has publicly published exploits. Connected sources (CNVD-2025-30209, RH-CVE, CNNVD, PT-2025-471...