CVE-2025-13277 | code-projects Nero Social Networking Site 1.0 /friendsphoto.php ID sql injection

November 16, 2025 Yanac

A vulnerability classified as critical has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection.

This vulnerability is handled as CVE-2025-13277. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More