Read the docs
TI-2006-06255 Aliases CVE-2006-6510GHSA-wpwm-rpc6-hq6w

An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for…

Priority LOW 10Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions.

Why it matters now

EPSS 0.0032 25th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:a:sitekiosk:sitekiosk:4.9.11:*:*:*:*:*:*:*4.9.11VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.9.14:*:*:*:*:*:*:*4.9.14VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.96:*:*:*:*:*:*:*4.96VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.96.0:*:*:*:*:*:*:*4.96.0VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.96.3:*:*:*:*:*:*:*4.96.3VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:4.97.0:*:*:*:*:*:*:*4.97.0VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.19:*:*:*:*:*:*:*5.0.19VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.26:*:*:*:*:*:*:*5.0.26VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.32:*:*:*:*:*:*:*5.0.32VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.35:*:*:*:*:*:*:*5.0.35VulnerableSitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.9.11:*:*:*:*:*:*:* Versions 4.9.11 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.9.14:*:*:*:*:*:*:* Versions 4.9.14 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.96:*:*:*:*:*:*:* Versions 4.96 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.96.0:*:*:*:*:*:*:* Versions 4.96.0 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.96.3:*:*:*:*:*:*:* Versions 4.96.3 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:4.97.0:*:*:*:*:*:*:* Versions 4.97.0 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.19:*:*:*:*:*:*:* Versions 5.0.19 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.26:*:*:*:*:*:*:* Versions 5.0.26 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.32:*:*:*:*:*:*:* Versions 5.0.32 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.35:*:*:*:*:*:*:* Versions 5.0.35 Vulnerable ·Sitekiosk
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sitekiosk:sitekiosk:5.0.36:*:*:*:*:*:*:*5.0.36VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.38:*:*:*:*:*:*:*5.0.38VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.41:*:*:*:*:*:*:*5.0.41VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.238:*:*:*:*:*:*:*5.0.238VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.248:*:*:*:*:*:*:*5.0.248VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.0.264:*:*:*:*:*:*:*5.0.264VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.34:*:*:*:*:*:*:*5.5.34VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.35:*:*:*:*:*:*:*5.5.35VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.36:*:*:*:*:*:*:*5.5.36VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.39:*:*:*:*:*:*:*5.5.39VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:5.5.45:*:*:*:*:*:*:*5.5.45VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:6.0.14:*:*:*:*:*:*:*6.0.14VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:6.0.98_final:*:*:*:*:*:*:*6.0.98_finalVulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:6.2.51:*:*:*:*:*:*:*6.2.51VulnerableSitekiosk
cpe:2.3:a:sitekiosk:sitekiosk:6.5.149:*:*:*:*:*:*:*6.5.149VulnerableSitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.36:*:*:*:*:*:*:* Versions 5.0.36 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.38:*:*:*:*:*:*:* Versions 5.0.38 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.41:*:*:*:*:*:*:* Versions 5.0.41 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.238:*:*:*:*:*:*:* Versions 5.0.238 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.248:*:*:*:*:*:*:* Versions 5.0.248 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.0.264:*:*:*:*:*:*:* Versions 5.0.264 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.34:*:*:*:*:*:*:* Versions 5.5.34 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.35:*:*:*:*:*:*:* Versions 5.5.35 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.36:*:*:*:*:*:*:* Versions 5.5.36 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.39:*:*:*:*:*:*:* Versions 5.5.39 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:5.5.45:*:*:*:*:*:*:* Versions 5.5.45 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:6.0.14:*:*:*:*:*:*:* Versions 6.0.14 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:6.0.98_final:*:*:*:*:*:*:* Versions 6.0.98_final Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:6.2.51:*:*:*:*:*:*:* Versions 6.2.51 Vulnerable ·Sitekiosk
  • cpe:2.3:a:sitekiosk:sitekiosk:6.5.149:*:*:*:*:*:*:* Versions 6.5.149 Vulnerable ·Sitekiosk

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-6510
  2. 2026-10-03 Alias added: GHSA-wpwm-rpc6-hq6w

References

Patch 1

Other 1

  • TI-2006-06254 Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before… CVSS 2.0MEDIUM 4.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences