Fabian Nero Social Networking Site vulnerabilities

7 CVEs affecting Fabian Nero Social Networking Site, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13279, published 2025-11-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-4250, published 2025-05-04. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Nero Social Networking Site 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument…
CVE-2025-12309, published 2025-10-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql…
CVE-2025-12308, published 2025-10-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of…
CVE-2025-12307, published 2025-10-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the…
CVE-2025-12306, published 2025-10-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql…
CVE-2025-13277, published 2025-11-17. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql…
CVE-2025-13279, published 2025-11-17. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID…