CVE 6.9 MEDIUM

code-projects Nero Social Networking Site acceptoffres.php sql injection_CVE-2025-12306

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Basic Information

ID CVE-2025-12306
Source VulDB
Published Oct 27, 2025 at 18:32
Modified Oct 27, 2025 at 20:37

Affected Product

Vendor code-projects
Product Nero Social Networking Site
Version 1.0
Affected Versions code-projects Nero Social Networking Site 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.