Do we care to have questions similar to Exploiting PHP via GET params?
Why or why not?
I think, based on the lengthy discussion previously held, this type of question does provide value to both attackers and defenders, so is probably on topic here.
This question is nicely specific, asking for analysis of a particular type of attack so I think it is okay here - I understand your point that as it is currently worded it is obviously aimed at attack, but even if it was changed to be aimed at defence it wouldn't be a huge stretch to see the other side.
If it was a 'givmetehkoedz' question it would obviously be off topic, but I think that fragments like this are of value to defenders and are a learning opportunity.