CVE-2006-6510

Summary

An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/archive/1/454185/100/0/threaded
• http://www.securityfocus.com/bid/21567
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30878
• http://www.sitekiosk.com/th_support/versions/index.php3?id=39
• http://www.vupen.com/english/advisories/2006/4985
• http://secunia.com/advisories/23253

References

• http://www.securityfocus.com/archive/1/454185/100/0/threaded
• http://www.securityfocus.com/bid/21567
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30878
• http://www.sitekiosk.com/th_support/versions/index.php3?id=39
• http://www.vupen.com/english/advisories/2006/4985
• http://secunia.com/advisories/23253

• ←Previous
• Next→