An open redirect vulnerability exists in KodExplorer 4.52. By manipulating the 'link' parameter in the URL, an attacker can craft a malicious URL that appears legitimate to redirect users to a different, malicious website upon login.
By using this vulnerability remotely, the malicious pwned_admin can list and manipulate all files inside the server. This is an absolutely DANGEROUS and STUPID decision from the application owner! In this scenario, the attacker prepares the machine for exploitation and sends a link for remote execution by using the CURL protocol to his supporter - another attacker. Then and he waits for execution from his colleague, to mask his action or even more worst than ever. What a nice hack is this! :)
KodExplorer is vulnerable to CSRF to Arbitrary File Upload. An attacker can craft a malicious URL and send it to the victim. When the victim opens the URL, the attacker can upload a malicious file to the victim's system. This vulnerability affects KodExplorer versions <= 4.49.
Services By CQR