Inurl: Id=1 .pk

SQL injection is the number one risk associated with id= parameters. A vulnerable script might take the id from the URL and directly insert it into an SQL query, like so:

https://www.example-pk-news.com/article.php?id=1 inurl id=1 .pk