Unscored severity · published Dec 17, 2007
CVE-2007-6394
SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter in an expand action
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter in an expand action.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Content Injector · P3mbo
1.53 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6394
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6394
secunia.com
http://secunia.com/advisories/27986
www.securityfocus.com
http://www.securityfocus.com/bid/26781
www.vupen.com
http://www.vupen.com/english/advisories/2007/4175
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/38939
www.exploit-db.com
https://www.exploit-db.com/exploits/4706
More from Content Injector
–
CVE-2007-6137
SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php