EUVD-2011-4754

Malware in sbrugna...

EUVD-2011-4755

Malware in sbrugna...

CVE-2011-4837

Cross-site request forgery CSRF vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs...

CVE-2011-4836

Cross-site scripting XSS vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI...

CVE-2011-4835

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors...

HomeSeer HS2 Web Interface Multiple Vulnerabilities

This host is running HomeSeer HS2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodhomeseerhs2webinterfacemultvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ HomeSeer HS2 Web Interface Multiple Vulnerabilities Authors: Rachana Shetty Copyright: Copyright c 2011 SecPod,...

HomeSeer HS2 Web Interface <= 2.5.0.20 Multiple XSS Vulnerabilities - Active Check

HomeSeer HS2 is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2011-4835

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors...

CVE-2011-4837

Cross-site request forgery CSRF vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs...

CVE-2011-4836

Cross-site scripting XSS vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI...

Directory traversal

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI...

CVE-2011-4835

CVE-2011-4835 is a directory traversal vulnerability in the HomeSeer HS2 Web Interface (version 2.5.0.20 or earlier) that allows remote attackers to access arbitrary files via unspecified vectors. The NVD entry describes a web interface directory traversal with a CVSSv2 base score of 7.5 (High) a...

CVE-2011-4835

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors...

CVE-2011-4836

The CVE-2011-4836 entry describes a Cross-Site Scripting (XSS) vulnerability in the web interface of HomeSeer HS2 version 2.5.0.20. The issue allows remote attackers to inject arbitrary web script or HTML through requests for crafted URIs directed at the HS2 web UI. Public references in the conne...

CVE-2011-4835: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors...

PT-2011-5136

Name of the Vulnerable Software and Affected Versions HomeSeer HS2 version 2.5.0.20 Description A cross-site request forgery issue exists in the web interface of HomeSeer HS2, specifically in the /ctrl endpoint, allowing remote attackers to hijack admin authentication for requests that execute...

CVE-2011-4836: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI...

CVE-2011-4837: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs...

PT-2011-5135

Name of the Vulnerable Software and Affected Versions HomeSeer HS2 version 2.5.0.20 Description A cross-site scripting XSS issue exists in the web interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted URI request. Recommendations For HomeSeer HS2 version...