CVE-2026-52521
A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature.
- Score
- CVSS 3.1 8.1 High
- Status
- Deferred - cve@mitre.org
- Published
- 2026-08-03
- Last modified
- 2026-10-23
- Weaknesses
- CWE-89
References
- https://github.com/zblogcn/zblogphp
- https://github.com/LING12138-sg/MyCVE-Report
