CVE-2017-14345

Critical

Published: 12/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php. This issue was identified until September 12, 2017.

Risk Assessment

An attacker can exploit this vulnerability to execute unauthorized queries to the database, potentially leading to the disclosure of sensitive information or data manipulation.

Recommendation

It is recommended to validate and sanitize input data and to update the application to the latest version to minimize the risk of attack.

Original NVD description (English source)

SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.