VYPR

Nero Social Networking Site

by Fabian

CVEs (7)

  • CVE-2025-13277HigNov 17, 2025
    risk 0.47cvss 7.3epss 0.00

    A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and…

  • CVE-2025-12309HigOct 27, 2025
    risk 0.47cvss 7.3epss 0.00

    A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been…

  • CVE-2025-12308HigOct 27, 2025
    risk 0.47cvss 7.3epss 0.00

    A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument message_id results in sql injection. It is possible to initiate the…

  • CVE-2025-12307HigOct 27, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The…

  • CVE-2025-12306HigOct 27, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been…

  • CVE-2025-4250HigMay 4, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability was found in code-projects Nero Social Networking Site 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument fname/lname/login/password2/cpassword/address/cnumber/email/gender/propic/month…

  • CVE-2025-13279MedNov 17, 2025
    risk 0.41cvss 6.3epss 0.00

    A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has…