CVE-2025-12307: code-projects Nero Social Networking Site addfriend.php sql injection

Published Oct 27, 2025

Updated

A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.

Affected Software

2 affected components

Code-projects Nero Social Networking Site

Fabian Nero Social Networking Site=1.0

Event History

Oct 27, 2025

CVE Published

via MITRE·07:02 PM

Data Sourced

via MITRE·07:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-12307?

CVE-2025-12307 is classified as a high severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-12307?

To fix CVE-2025-12307, sanitize and validate user input for the ID parameter in the /addfriend.php file.

What type of vulnerability is CVE-2025-12307?

CVE-2025-12307 is an SQL injection vulnerability that can be exploited through remote manipulation.

Which software is affected by CVE-2025-12307?

CVE-2025-12307 affects the Nero Social Networking Site 1.0 by code-projects.

Can CVE-2025-12307 be exploited remotely?

Yes, CVE-2025-12307 can be exploited remotely through the manipulation of the ID argument.