Executive Summary

Informations
Name	CVE-2011-4836	First vendor Publication	2011-12-14
Vendor	Cve	Last vendor Modification	2011-12-15

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4836

CWE : Common Weakness Enumeration

id	Name
CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting')

CPE : Common Platform Enumeration

Type	Description	Count
Application	Homeseer Homeseer Hs2 cpe:/a:homeseer:homeseer_hs2:2.5.0.20	1

ExploitDB Exploits

id	Description
2012-03-07	HomeSeer HS2 and HomeSeer PRO Multiple Vulnerabilities

Open Source Vulnerability Database (OSVDB)

id	Description
77588	HomeSeer HS2 Web Interface Log Viewer Page URI XSS

Internal Sources (Detail)

Source	Url
CERT-VN	http://www.kb.cert.org/vuls/id/796883

Alert History

Date	Informations
2013-05-10 23:11:57	Multiple Updates