CoreCVE
Back

HIGH

A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature

Published Aug 3, 2026

Description

A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 3, 2026
Updated Aug 5, 2026
Reserved Jun 8, 2026
Link CVE-2026-52521
CISA Vulnrichment
Updated Aug 5, 2026
NVD
Status Deferred
Modified Sep 9, 2026
Link CVE-2026-52521
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-52521
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a