CVE-2025-12306

CRITICAL 9.8CVE-2025-12306 · Published 27/10/2025 · updated 08/10/2026

Package	Affected versions	Patched versions
nero social networking site fabian	`= 1.0`	No fix yet

Description

A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

References

code-projects.org · Product
yuan466/CVE · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free