An open redirect vulnerability exists in KodExplorer 4.52. By manipulating the 'link' parameter in the URL, an attacker can craft a malicious URL that appears legitimate to redirect users to a different, malicious website upon login.
This exploit allows an attacker to gain access to the admin panel of Check Up New Generation 4.52 by exploiting a SQL Injection vulnerability in the findoffice.php search page. The exploit requires the magic_quotes_gpc to be set to off.
Services By CQR