CVEvulnerability

CVE-2006-6509

4.1 MEDIUM Published 2006-12-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-12-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.1 MEDIUM — AV:L/AC:M/Au:S/C:P/I:P/A:P

Description

Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser.

Affected configurations

• sitekiosk sitekiosk 4.9.11 • sitekiosk sitekiosk 4.9.14 • sitekiosk sitekiosk 4.96 • sitekiosk sitekiosk 4.96.0 • sitekiosk sitekiosk 4.96.3 • sitekiosk sitekiosk 4.97.0 • sitekiosk sitekiosk 5.0.19 • sitekiosk sitekiosk 5.0.26 • sitekiosk sitekiosk 5.0.32 • sitekiosk sitekiosk 5.0.35 • sitekiosk sitekiosk 5.0.36 • sitekiosk sitekiosk 5.0.38 • sitekiosk sitekiosk 5.0.41 • sitekiosk sitekiosk 5.0.238 • sitekiosk sitekiosk 5.0.248 • sitekiosk sitekiosk 5.0.264 • sitekiosk sitekiosk 5.5.34 • sitekiosk sitekiosk 5.5.35 • sitekiosk sitekiosk 5.5.36 • sitekiosk sitekiosk 5.5.39 • sitekiosk sitekiosk 5.5.45 • sitekiosk sitekiosk 6.0.14 • sitekiosk sitekiosk 6.0.98 final • sitekiosk sitekiosk 6.2.51 • sitekiosk sitekiosk 6.5.149

References