6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Basic Information
ID
CVE-2025-12306
Source
VulDB
Published
Oct 27, 2025 at 18:32
Modified
Oct 27, 2025 at 20:37
Affected Product
Vendor
code-projects
Product
Nero Social Networking Site
Version
1.0
Affected Versions
code-projects Nero Social Networking Site 1.0