CVE-2011-4837

CVE-2011-4837 describes a Cross-site request forgery (CSRF) in the HomeSeer HS2 web interface (/ctrl) that allows an attacker to hijack admin authentication and perform actions, including executing arbitrary programs, on HS2 2.5.0.20. The available sources confirm the vulnerability and affected v...

PT-2011-5134

Name of the Vulnerable Software and Affected Versions HomeSeer HS2 version 2.5.0.20 Description A directory traversal issue exists in the web interface, allowing remote attackers to access arbitrary files. Recommendations For HomeSeer HS2 version 2.5.0.20, update to a newer version that contains ...

CVE-2011-4835: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors...

PT-2011-5136

Name of the Vulnerable Software and Affected Versions HomeSeer HS2 version 2.5.0.20 Description A cross-site request forgery issue exists in the web interface of HomeSeer HS2, specifically in the /ctrl endpoint, allowing remote attackers to hijack admin authentication for requests that execute...

PT-2011-5135

Name of the Vulnerable Software and Affected Versions HomeSeer HS2 version 2.5.0.20 Description A cross-site scripting XSS issue exists in the web interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted URI request. Recommendations For HomeSeer HS2 version...

CVE-2011-4837: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs...

CVE-2011-4836: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI...

HomeSeer HS2 2.5.0.20 - Web Interface Log Viewer Page URI Cross-Site Scripting

HomeSeer HS2 2.5.0.20 - Web Interface Log Viewer Page URI Cross-Site Scripting source: https://www.securityfocus.com/bid/50978/info HS2 web interface is prone to multiple security vulnerabilities: 1. An HTML-injection vulnerability. 2. A cross-site request-forgery vulnerability. 3. A...

HomeSeer HS2 web interface multiple vulnerabilities

Overview HomeSeer HS2 home automation software web interface contains multiple vulnerabilities. Description According to HomeSeer's website, "HomeSeer HS2 is an advanced home automation and remote access software package that is designed to integrate the major systems of any home". The HomeSeer H...