Description
A remote SQL injection vulnerability exists in LulieBlog 1.02 through the id parameter in voircom.php. The parameter is directly used in SQL queries without sanitization.
Impact
Attackers can inject arbitrary SQL to extract all data from the blog database, including posts, comments, user credentials, and administrative information.
Solution
Apply parameterized queries to the id parameter. Migrate to a maintained blog platform.