CVE-2025-13279: code-projects Nero Social Networking Site profilefriends.php sql injection

Published Nov 17, 2025

Updated

A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

Code-projects Nero Social Networking Site

Fabian Nero Social Networking Site=1.0

Event History

Nov 17, 2025

CVE Published

via MITRE·12:32 PM

Data Sourced

via MITRE·12:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-13279?

CVE-2025-13279 is classified as a critical vulnerability due to its potential for remote SQL injection exploitation.

How do I fix CVE-2025-13279?

To fix CVE-2025-13279, validate and sanitize user input in the /profilefriends.php file to prevent SQL injection.

What type of vulnerability is CVE-2025-13279?

CVE-2025-13279 is an SQL injection vulnerability that allows remote attackers to manipulate database queries.

What software is affected by CVE-2025-13279?

CVE-2025-13279 affects Code-projects Nero Social Networking Site version 1.0.

Can CVE-2025-13279 be exploited remotely?

Yes, CVE-2025-13279 can be exploited remotely by attackers through manipulated requests.