CVE-2026-52521

Description

A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature.

References

• https://github.com/LING12138-sg/MyCVE-Report
• https://github.com/zblogcn/zblogphp