23 matches found
EUVD-2006-6492
Malware in sbrugna...
EUVD-2006-6493
Malware in sbrugna...
EUVD-2018-10482
Malware in sbrugna...
CVE-2018-18766
An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk before 9.7.4905...
Privilege escalation
An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk before 9.7.4905...
CVE-2018-18766
An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk before 9.7.4905...
CVE-2018-18766
An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk before 9.7.4905...
CVE-2018-18766
CVE-2018-18766 affects Provisio SiteKiosk prior to version 9.7.4905, specifically the Call Dispatcher component. The vulnerability is described as an elevation of privilege. Public references in the connected documents consistently indicate the affected product and version, with no detailed explo...
PT-2019-9630
Name of the Vulnerable Software and Affected Versions Provisio SiteKiosk versions prior to 9.7.4905 Description An elevation of privilege issue exists in the Call Dispatcher component. Recommendations For versions prior to 9.7.4905, update to version 9.7.4905 or later to resolve the issue...
CVE-2018-18766: Undefined Security Weakness
An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk before 9.7.4905...
sitekiosk-pwn.txt
Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...
Proviso SiteKiosk File Download Vulnerability
Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...
SiteKiosk < 6.5.150 Multiple Vulnerabilities
According to its version number, the installation of SiteKiosk on the remote host contains an unspecified ActiveX control that is marked as 'safe for scripting' yet exposes two dangerous methods that reading and downloading of any file from the kiosk. In addition, it fails to completely sanitize...
CVE-2006-6510
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions...
CVE-2006-6509
Cross-site scripting XSS vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser...
CVE-2006-6510
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions...
SiteKiosk security protection bypass
It's possible to access disk content with broser path ABOUT:helloa href=click here/a...
CVE-2006-6509: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser...
CVE-2006-6509
SiteKiosk
CVE-2006-6510: Undefined Security Weakness
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions...