Read the docs
TI-2006-06254 Aliases CVE-2006-6509GHSA-f7qv-93xv-xcw8

Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before…

Priority LOW 19Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser.

Why it matters now

EPSS 0.00294 22nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:a:sitekiosk:sitekiosk:4.9.11:*:*:*:*:*:*:*4.9.11VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.9.14:*:*:*:*:*:*:*4.9.14VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.96:*:*:*:*:*:*:*4.96VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.96.0:*:*:*:*:*:*:*4.96.0VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.96.3:*:*:*:*:*:*:*4.96.3VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.97.0:*:*:*:*:*:*:*4.97.0VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.19:*:*:*:*:*:*:*5.0.19VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.26:*:*:*:*:*:*:*5.0.26VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.32:*:*:*:*:*:*:*5.0.32VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.35:*:*:*:*:*:*:*5.0.35VulnerableSitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.9.11:*:*:*:*:*:*:* Versions 4.9.11 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.9.14:*:*:*:*:*:*:* Versions 4.9.14 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.96:*:*:*:*:*:*:* Versions 4.96 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.96.0:*:*:*:*:*:*:* Versions 4.96.0 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.96.3:*:*:*:*:*:*:* Versions 4.96.3 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.97.0:*:*:*:*:*:*:* Versions 4.97.0 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.19:*:*:*:*:*:*:* Versions 5.0.19 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.26:*:*:*:*:*:*:* Versions 5.0.26 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.32:*:*:*:*:*:*:* Versions 5.0.32 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.35:*:*:*:*:*:*:* Versions 5.0.35 Vulnerable ·Sitekiosk
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sitekiosk:sitekiosk:5.0.36:*:*:*:*:*:*:*5.0.36VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.38:*:*:*:*:*:*:*5.0.38VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.41:*:*:*:*:*:*:*5.0.41VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.238:*:*:*:*:*:*:*5.0.238VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.248:*:*:*:*:*:*:*5.0.248VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.264:*:*:*:*:*:*:*5.0.264VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.34:*:*:*:*:*:*:*5.5.34VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.35:*:*:*:*:*:*:*5.5.35VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.36:*:*:*:*:*:*:*5.5.36VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.39:*:*:*:*:*:*:*5.5.39VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.45:*:*:*:*:*:*:*5.5.45VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:6.0.14:*:*:*:*:*:*:*6.0.14VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:6.0.98_final:*:*:*:*:*:*:*6.0.98_finalVulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:6.2.51:*:*:*:*:*:*:*6.2.51VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:6.5.149:*:*:*:*:*:*:*6.5.149VulnerableSitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.36:*:*:*:*:*:*:* Versions 5.0.36 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.38:*:*:*:*:*:*:* Versions 5.0.38 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.41:*:*:*:*:*:*:* Versions 5.0.41 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.238:*:*:*:*:*:*:* Versions 5.0.238 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.248:*:*:*:*:*:*:* Versions 5.0.248 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.264:*:*:*:*:*:*:* Versions 5.0.264 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.34:*:*:*:*:*:*:* Versions 5.5.34 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.35:*:*:*:*:*:*:* Versions 5.5.35 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.36:*:*:*:*:*:*:* Versions 5.5.36 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.39:*:*:*:*:*:*:* Versions 5.5.39 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.45:*:*:*:*:*:*:* Versions 5.5.45 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:6.0.14:*:*:*:*:*:*:* Versions 6.0.14 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:6.0.98_final:*:*:*:*:*:*:* Versions 6.0.98_final Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:6.2.51:*:*:*:*:*:*:* Versions 6.2.51 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:6.5.149:*:*:*:*:*:*:* Versions 6.5.149 Vulnerable ·Sitekiosk

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-6509
  2. 2026-10-03 Alias added: GHSA-f7qv-93xv-xcw8

References

Patch 1

Advisory 1

Other 1

  • TI-2006-06255 An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for… CVSS 2.0LOW 1.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences