CVE-2016-3113 (PoC)
Exploiting reflected-xss in private cloud scenario and showing how to power off (as example) a virtual machine in IaaS oVirt cloud Sorry for the ugly JS code Needed to be quick
More Info here:
wwwitskritisde/_uploads/jk17/Students___Freigabeversion/DURMAZ___Praesentationpdf (slides in german language)
accessredhatcom/security/cve/cve-