Description (CNA)
Kmaleon 1.1.0.205 contains an authenticated SQL injection vulnerability in the 'tipocomb' parameter of kmaleonW.php that allows attackers to manipulate database queries. Attackers can exploit this vulnerability using boolean-based, error-based, and time-based blind SQL injection techniques to potentially extract or manipulate database information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Levelprograms / Kmaleon | affected 1.1.0.205 |
CWE
CWE-89
References
- https://www.exploit-db.com/exploits/50499
- https://web.archive.org/web/20210616143348/https://www.levelprograms.com/kmaleon-abogados/
ADP enrichment
No English description supplied.
No references supplied.