Philipinho Simple-PHP-Blog SQL Injection Vulnerability in edit.php

A SQL injection vulnerability has been identified in Philipinho Simple-PHP-Blog versions prior to 94b5d3e57308bce5dfbc44c3edafa9811893d958. The issue arises in the edit.php file, where the id parameter is not properly sanitized or type-checked, allowing for SQL injection attacks. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Reproduction

To reproduce this vulnerability, send a POST request to edit.php with an unsanitized id parameter. The injection can be verified by using SQL injection techniques, such as adding a payload that exploits the application's database query handling.