# Affected software: qlik # Type of vulnerability:open redirect # URL:qlik.com # Discovered by: provensec # Website: provensec.com #version: n/a # Proof of concept vulnerable param:returnurl https://login.qlik.com/login.aspx?status=lol&returnURL=domain example: https://login.qlik.com/login.aspx?status=lol&returnURL=http%3a%2f%2fgoogle.com%2f -- Best Regards, Ankit Bharathan /*Security Researcher* [image: Provensec,llc] <http://provenec.com/> ankit.b@provensec.com Provensec,llc http://provenec.com P *Consider the environment. Please don't print this e-mail unless absolutely necessary.*