Description - SQL Injection Vulnerability in wpBlog

SQL Injection found in wpBlog script.

Exploit

Available

Solution

Not available - check vendor's website

Vulnerable script: index.php

Parameter postid is not properly sanitized before being used in SQL query. This can be used to make any SQL query by injecting arbitrary SQL code.

Condition: magic_quotes_gpc = off