1.7

CVE-2006-6510

An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sitekiosk ≫ Sitekiosk Version 4.9.11
Sitekiosk ≫ Sitekiosk Version 4.9.14
Sitekiosk ≫ Sitekiosk Version 4.96
Sitekiosk ≫ Sitekiosk Version 4.96.0
Sitekiosk ≫ Sitekiosk Version 4.96.3
Sitekiosk ≫ Sitekiosk Version 4.97.0
Sitekiosk ≫ Sitekiosk Version 5.0.19
Sitekiosk ≫ Sitekiosk Version 5.0.26
Sitekiosk ≫ Sitekiosk Version 5.0.32
Sitekiosk ≫ Sitekiosk Version 5.0.35
Sitekiosk ≫ Sitekiosk Version 5.0.36
Sitekiosk ≫ Sitekiosk Version 5.0.38
Sitekiosk ≫ Sitekiosk Version 5.0.41
Sitekiosk ≫ Sitekiosk Version 5.0.238
Sitekiosk ≫ Sitekiosk Version 5.0.248
Sitekiosk ≫ Sitekiosk Version 5.0.264
Sitekiosk ≫ Sitekiosk Version 5.5.34
Sitekiosk ≫ Sitekiosk Version 5.5.35
Sitekiosk ≫ Sitekiosk Version 5.5.36
Sitekiosk ≫ Sitekiosk Version 5.5.39
Sitekiosk ≫ Sitekiosk Version 5.5.45
Sitekiosk ≫ Sitekiosk Version 6.0.14
Sitekiosk ≫ Sitekiosk Version 6.0.98_final
Sitekiosk ≫ Sitekiosk Version 6.2.51
Sitekiosk ≫ Sitekiosk Version 6.5.149
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.237
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 1.7 3.1 2.9
AV:L/AC:L/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/23253
http://www.securityfocus.com/archive/1/454185/100/0/threaded
http://www.securityfocus.com/bid/21567
Patch
http://www.sitekiosk.com/th_support/versions/index.php3?id=39
Patch
http://www.vupen.com/english/advisories/2006/4985
https://exchange.xforce.ibmcloud.com/vulnerabilities/30878