2026-01-15 15:52:09
VulnCheck
PUBLISHED
Kmaleon 1.1.0.205 contains an authenticated SQL injection vulnerability in the tipocomb parameter of kmaleonW.php that allows attackers to manipulate database queries. Attackers can exploit this vulnerability using boolean-based, error-based, and time-based blind SQL injection techniques to potentially extract or manipulate database information.