CVE-2025-13279

Published November 17th, 2025

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.

daojian1/Nero-Social-Networking-Site-V1.0_005

Nero Social Networking Site V1.0 profilefriends.php SQL injection

GitHub