A proof of concept to exploit the reflected XSS vulnerability in the oVirt web interface (RedHat). In this PoC a VM in the oVirt IaaS environment is to be started via the victim's browser session. JS code has been kept simple due to the rush.
CVE-2016-3113 (PoC)
A proof of concept to exploit the reflected XSS vulnerability in the oVirt web interface (RedHat) In this PoC a VM in the oVirt IaaS environment is to be started via the victim's browser session JS code has been kept simple due to the rush
More Info here:
wwwitskritisde/_uploads/jk17/Students___Freigabeversion/DURMAZ___Praesentationpdf (sl