Description
Kmaleon 1.1.0.205 contains an authenticated SQL injection vulnerability in the 'tipocomb' parameter of kmaleonW.php that allows attackers to manipulate database queries. Attackers can exploit this vulnerability using boolean-based, error-based, and time-based blind SQL injection techniques to potentially extract or manipulate database information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Levelprograms | Kmaleon | 1.1.0.205 | — |
References
- ExploitDB-50499 exploit
- Archived Kmaleon Software Product Page product