37 matches found
CVE-2011-4836
Cross-site scripting XSS vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI...
CVE-2011-4835
Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors...
CVE-2011-4836
The CVE-2011-4836 entry describes a Cross-Site Scripting (XSS) vulnerability in the web interface of HomeSeer HS2 version 2.5.0.20. The issue allows remote attackers to inject arbitrary web script or HTML through requests for crafted URIs directed at the HS2 web UI. Public references in the conne...
CVE-2011-4837
Cross-site request forgery CSRF vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs...
CVE-2011-4835: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors...
CVE-2011-4837: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs...
CVE-2011-4836: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI...
HomeSeer HS2 2.5.0.20 - Web Interface Log Viewer Page URI Cross-Site Scripting
HomeSeer HS2 2.5.0.20 - Web Interface Log Viewer Page URI Cross-Site Scripting source: https://www.securityfocus.com/bid/50978/info HS2 web interface is prone to multiple security vulnerabilities: 1. An HTML-injection vulnerability. 2. A cross-site request-forgery vulnerability. 3. A...
HomeSeer HS2 web interface multiple vulnerabilities
Overview HomeSeer HS2 home automation software web interface contains multiple vulnerabilities. Description According to HomeSeer's website, "HomeSeer HS2 is an advanced home automation and remote access software package that is designed to integrate the major systems of any home". The HomeSeer H...
HomeSeer HS2 2.5.0.20 - Web Interface Log Viewer Page URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/50978/info HS2 web interface is prone to multiple security vulnerabilities: 1. An HTML-injection vulnerability. 2. A cross-site request-forgery vulnerability. 3. A directory-traversal vulnerability. Attackers can exploit these issues to perform certain...
CVE-2001-0037
Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. dot dot specifiers...
CVE-2001-0037
CVE-2001-0037 affects HomeSeer prior to version 1.4.29 and is a directory traversal vulnerability. The issue arises from insufficient validation of URL-embedded .. sequences, allowing remote attackers to read arbitrary files. Impact is read access to non-public files; no exploit details are provi...
CVE-2001-0037
Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. dot dot specifiers...
CVE-2001-0037: Undefined Security Weakness
Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. dot dot specifiers...
Дырка в HomeSeer
ОБратный путь в директории в встроенном HTTP-сервере...
HomeSeer Directory Traversal Vulnerability
Strumpf Noir Society Advisories ! Public release ! -- -= HomeSeer Directory Traversal Vulnerability =- Release date: Thursday, December 7, 2000 Introduction: HomeSeer is home automation software for Windows 2000, Windows NT, Windows 98, and Windows 95 that uses inexpensive X10 technology to contr...
keware technologies homeseer 1.4 - Directory Traversal
keware technologies homeseer 1.4 - Directory Traversal source: https://www.securityfocus.com/bid/2085/info Keware Technologies HomeSeer is a home automation application which enables users to control various housewares and appliances locally or remotely via a web interface. It is possible for a...