CVE-2012-4947

CVE-2012-4947 affects Agile FleetCommander and FleetCommander Kiosk prior to 4.08, where database credentials are stored in cleartext. This information disclosure vulnerability allows remote attackers to obtain sensitive data via unspecified pages. The NVD entry confirms a medium severity (CVSS v...

CVE-2012-4941

CVE-2012-4941 covers multiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk prior to 4.08, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected are Agile FleetCommander and FleetCommander Kiosk versions before 4.08; vendor ...

CVE-2012-4943

The CVE-2012-4943 entry concerns Agile FleetCommander and FleetCommander Kiosk (pre-4.08) with CSRF weaknesses allowing an attacker to hijack a logged-in user’s session to perform actions that change passwords, accounts, or permissions. The core issue is CSRF in the web interface, enabling uninte...

CVE-2012-4942

CVE-2012-4942 describes multiple XSS vulnerabilities in Agile FleetCommander and FleetCommander Kiosk prior to version 4.08. The flaw allows remote attackers to inject arbitrary web script or HTML via an arbitrary text field, with impact including user browser script execution. The trusted remedi...

CVE-2012-4944

Multiple unrestricted file upload vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary code by uploading a file via an unspecified page...

CVE-2012-4942

Multiple cross-site scripting XSS vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to inject arbitrary web script or HTML via an arbitrary text field...

Solaris 10 (sparc) : 128165-02 (deprecated)

Sun Ray Kiosk Session Service version 4.0 Patch Update for SRSS. Date this patch was last updated by Sun : Jul/09/09 This plugin has been deprecated and either replaced with individual 128165 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2008-2112

Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig...

CVE-2008-2112

Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig...

CVE-2008-2112

CVE-2008-2112 affects Sun Ray Kiosk Mode 4.0. The vulnerability allows local and remote authenticated Sun Ray administrators to gain root privileges through unknown/utconfig-related vectors. The exact root cause and exploited components are not fully detailed in the provided documents, but the im...

usb-blam.txt

I discovered rather inadvertently that laptops do not enjoy having their USB VCC shorted to GND one bit. It is a sure DoS, in fact if the machine has a stupid power supply, it could result in permanent damage. It is kind of scary for kiosk machines like the those ubiquitous Kodak photo centers. I...

CVE-2005-4589

Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to obtain the passcode...

CVE-2005-4590

Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via 1 removable media containing a program that will execute because of the autorun setting and 2 applications that are able to invoke other applications, as demonstrated by a file: URL specifying a .exe fi...

CVE-2005-4589

Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to obtain the passcode...

CVE-2005-4590

Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via 1 removable media containing a program that will execute because of the autorun setting and 2 applications that are able to invoke other applications, as demonstrated by a file: URL specifying a .exe fi...

CVE-2005-4589

CVE-2005-4589 affects Spb Kiosk Engine 1.0.0.1, where the administrator passcode is stored in plaintext in the registry. The root cause is insecure storage of credentials in the registry, enabling local users to obtain the passcode. The NVD entry notes a LOW base score (CVSS2: AV:L/AC:L/Au:N/C:P/...

CVE-2005-4590

CVE-2005-4590 : Affects Spb Kiosk Engine 1.0.0.1. Local users can bypass restrictions on allowed applications via (1) removable media with an autorun-executing program and (2) applications that invoke other apps, demonstrated by a file: URL for a .exe. Root cause is bypass of application-restrict...

CVE-2004-1781

The CVE-2004-1781 entry concerns the Info Touch Surfnet kiosk. The vulnerability arises in the Surfnet kiosk software via the CMD_CREDITCARD_CHARGE command, which local users can trigger to crash Surfnet and gain access to the underlying operating system. The NVD entry indicates a local exploit w...

CVE-2004-1780

Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts...

CVE-2004-1780

CVE-2004-1780 affects the Info Touch Surfnet kiosk. The issue allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts. CVSS v2.0 base score 4.6 (Medium): vectors suggest Local access, Low attack complexity, no authentication, partial impact on co...