CVE-2006-6510

Severity: low (CVSS 1.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-14 · updated 2026-06-16

Description

An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions.

Affected products

Sitekiosk: 4.9.11, 4.9.14, 4.96, 4.96.0, 4.96.3, 4.97.0 (+19)

References

http://secunia.com/advisories/23253
http://www.securityfocus.com/archive/1/454185/100/0/threaded
http://www.securityfocus.com/bid/21567
http://www.sitekiosk.com/th_support/versions/index.php3?id=39
http://www.vupen.com/english/advisories/2006/4985
https://exchange.xforce.ibmcloud.com/vulnerabilities/30878
http://secunia.com/advisories/23253
http://www.securityfocus.com/archive/1/454185/100/0/threaded
http://www.securityfocus.com/bid/21567
http://www.sitekiosk.com/th_support/versions/index.php3?id=39
http://www.vupen.com/english/advisories/2006/4985
https://exchange.xforce.ibmcloud.com/vulnerabilities/30878

Get alerted when CVE-2006-6510 or the next vulnerability affects your stack