CVE:CVE-2007-6137
CNNVD:CNNVD-200711-370
Content Injector中的news.php存在SQL注入漏洞，远程攻击者可以借助index.php的cat参数执行任意SQL指令。
solution:Upgrade p3mbo content_injector to a higher version than 1.52,and avoid the version 1.52