CVE-2006-6509

Published: Dec 14, 2006Modified: Apr 23, 2026

4.1

Vector

AV:L/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 2.7 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser.

Affected (25)

Products: Sitekiosk: Sitekiosk

Sitekiosk

1 product

Sitekiosk

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Sitekiosk Sitekiosk	Version 4.9.11
Sitekiosk Sitekiosk	Version 4.9.14
Sitekiosk Sitekiosk	Version 4.96.0
Sitekiosk Sitekiosk	Version 4.96.3
Sitekiosk Sitekiosk	Version 4.96
Sitekiosk Sitekiosk	Version 4.97.0
Sitekiosk Sitekiosk	Version 5.0.19
Sitekiosk Sitekiosk	Version 5.0.238
Sitekiosk Sitekiosk	Version 5.0.248
Sitekiosk Sitekiosk	Version 5.0.264
Sitekiosk Sitekiosk	Version 5.0.26
Sitekiosk Sitekiosk	Version 5.0.32
Sitekiosk Sitekiosk	Version 5.0.35
Sitekiosk Sitekiosk	Version 5.0.36
Sitekiosk Sitekiosk	Version 5.0.38
Sitekiosk Sitekiosk	Version 5.0.41
Sitekiosk Sitekiosk	Version 5.5.34
Sitekiosk Sitekiosk	Version 5.5.35
Sitekiosk Sitekiosk	Version 5.5.36
Sitekiosk Sitekiosk	Version 5.5.39
Sitekiosk Sitekiosk	Version 5.5.45
Sitekiosk Sitekiosk	Version 6.0.14
Sitekiosk Sitekiosk	Version 6.0.98_final
Sitekiosk Sitekiosk	Version 6.2.51
Sitekiosk Sitekiosk	Version 6.5.149