← Back

Sitekiosk

sitekiosk

Vendor: Sitekiosk • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-6510
1Sitekiosk
1Sitekiosk
Apr 23, 2026
Dec 14, 2006
N/A· v4
N/A· v3
1.7 LOW· v2
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions.
CVE-2006-6509
1Sitekiosk
1Sitekiosk
Apr 23, 2026
Dec 14, 2006
N/A· v4
N/A· v3
4.1 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed...Show more
Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser.Show less