Threats tagged 'ghsa-gfxw-jh2q-97qq'

CVE-2025-13279 is a SQL injection vulnerability in code-projects Nero Social Networking Site 1.0, specifically in the /profilefriends.php file. The vulnerability arises from manipulation of the ID argument, allowing remote attackers to execute unauthorized SQL commands. The vulnerability has a CVSS score of 6.3 (medium severity) and public exploit code is available. No patch or remediation information is currently provided.