9786 phpok3w SQL Injection Vulnerability in show.php

A SQL injection vulnerability has been identified in the 9786 phpok3w application, specifically in the file show.php. This issue arises from an unknown function that improperly handles the 'id' parameter, allowing remote attackers to manipulate SQL queries. The vulnerability exists in versions of phpok3w prior to the commit 901d96a06809fb28b17f3a4362c59e70411c933c.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can interfere with the application's database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Reproduction

The vulnerability can be reproduced by sending a request to show.php with a crafted 'id' parameter that includes malicious SQL payloads. The application will execute the injected SQL, potentially allowing access to sensitive database information or manipulation of the database.