CVE-2025-12308: code-projects Nero Social Networking Site deletemessage.php sql injection

Published Oct 27, 2025

Updated

A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument messageid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Code-projects Nero Social Networking Site

Fabian Nero Social Networking Site=1.0

Event History

Oct 27, 2025

CVE Published

via MITRE·07:02 PM

Data Sourced

via MITRE·07:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-12308?

CVE-2025-12308 is classified as a high severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-12308?

To fix CVE-2025-12308, validate and sanitize user inputs for the message_id parameter in the deletemessage.php file.

What type of attack can be executed with CVE-2025-12308?

CVE-2025-12308 allows for SQL injection attacks that can compromise the database integrity.

Which file is affected in CVE-2025-12308?

The affected file in CVE-2025-12308 is /deletemessage.php.

Which software is vulnerable to CVE-2025-12308?

CVE-2025-12308 affects version 1.0 of the Code-projects Nero Social Networking Site.