Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:nero_social_networking_site:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductNero Social Networking Site (87741d07-1f62-5fee-943f-071afd89a9b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4250 vulnerable 2026-06-08 07:29:15.927333 code-projects Nero Social Networking Site index.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Nero Social Networking Site 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument fname/lname/login/password2/cpassword/address/cnumber/email/gender/propic/month leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-04T09:00:07.131Z
Updated: 2025-05-06T14:13:21.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13279 vulnerable 2026-06-08 07:04:31.898452 code-projects Nero Social Networking Site profilefriends.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Published: 2025-11-17T12:32:06.789Z
Updated: 2025-11-17T13:56:13.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13277 vulnerable 2026-06-08 07:04:31.897392 code-projects Nero Social Networking Site friendsphoto.php sql injection
HIGH (7.3)
A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2025-11-17T11:32:06.496Z
Updated: 2025-11-17T14:27:08.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12309 vulnerable 2026-06-08 07:04:30.018854 code-projects Nero Social Networking Site friendprofile.php sql injection
HIGH (7.3)
A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-10-27T19:02:11.093Z
Updated: 2025-10-27T19:23:24.602Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12308 vulnerable 2026-06-08 07:04:30.018347 code-projects Nero Social Networking Site deletemessage.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument message_id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Published: 2025-10-27T19:02:08.377Z
Updated: 2025-10-27T20:38:22.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12307 vulnerable 2026-06-08 07:04:30.017912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12306 vulnerable 2026-06-08 07:04:30.016552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.