CVE-2025-12309mediumCWE-74CWE-89

CVE-2025-12309: fallo de gravedad media en code-projects Nero Social Networking Site

code-projects Nero Social Networking Site friendprofile.php sql injection

Publicada el

Seguir esta CVE+ Monitorear Nero Social Networking Site

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.9epss 0.5%
A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
code-projects · Nero Social Networking Site
CVEs relacionadas — code-projects Nero Social Networking Site

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-4250MEDIUMcode-projects Nero Social Networking Site index.php sql injectionEPSS 0.6%CVE-2025-13277MEDIUMcode-projects Nero Social Networking Site friendsphoto.php sql injectionEPSS 0.5%CVE-2025-12308MEDIUMcode-projects Nero Social Networking Site deletemessage.php sql injectionEPSS 0.5%CVE-2025-12307MEDIUMcode-projects Nero Social Networking Site addfriend.php sql injectionEPSS 0.5%CVE-2025-12306MEDIUMcode-projects Nero Social Networking Site acceptoffres.php sql injectionEPSS 0.5%CVE-2025-13279MEDIUMcode-projects Nero Social Networking Site profilefriends.php sql injectionEPSS 0.4%