Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2006-12-14T00:00:00
Updated: 2024-08-07T20:26:46.520Z
Reserved: 2006-12-13T00:00:00
Link: CVE-2006-6509
Vulnrichment
No data.
NVD
Status : Modified
Published: 2006-12-14T00:28:00.000
Modified: 2018-10-17T21:49:01.847
Link: CVE-2006-6509
Redhat
No data.