CVE-2021-47766

CVE-2021-47766 affects Kmaleon 1.1.0.205. The authenticated SQL injection is in the tipocomb parameter of kmaleonW.php, enabling manipulation of database queries. Attack techniques documented include boolean-based, error-based, and time-based blind SQL injection to potentially extract or alter da...

PT-2026-3042

Kmaleon 1.1.0.205 contains an authenticated SQL injection vulnerability in the 'tipocomb' parameter of kmaleonW.php that allows attackers to manipulate database queries. Attackers can exploit this vulnerability using boolean-based, error-based, and time-based blind SQL injection techniques to...