CVE-2007-6137: p3mbo Content Injector

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected products

• p3mbo Content Injector: version 1.52 only

Published 2007-11-27. Last modified 2026-06-16.