A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature.

Info

CVECVE-2026-52521

First seen2026-08-03 23:15 UTC

Disclosed2026-08-03 21:16 UTC

Last updated2026-08-03 23:15 UTC

Channel statusauto

Summary

A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://github.com/LING12138-sg/MyCVE-Report
https://github.com/zblogcn/zblogphp

Timeline

2026-08-03 nvd_ingest NVD