High severity7.1NVD Advisory· Published Jan 15, 2026· Updated Apr 15, 2026

CVE-2021-47766

Description

Kmaleon 1.1.0.205 contains an authenticated SQL injection vulnerability in the 'tipocomb' parameter of kmaleonW.php that allows attackers to manipulate database queries. Attackers can exploit this vulnerability using boolean-based, error-based, and time-based blind SQL injection techniques to potentially extract or manipulate database information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

web.archive.org/web/20210616143348/https://www.levelprograms.com/kmaleon-abogados/nvd
www.exploit-db.com/exploits/50499nvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000