CVE-2025-12307 | code-projects Nero Social Networking Site 1.0 /addfriend.php ID sql injection

October 26, 2025 Yanac

A vulnerability described as critical has been identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection.

This vulnerability is listed as CVE-2025-12307. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More