Secunia

A vulnerability has been reported in SiteKiosk allowing malicious users to bypass URL restrictions.

SiteKiosk restricts or allows access to sites based upon strings matching allowed or restricted URLs. However, SiteKiosk fails to detect if this string is part of another domain (e.g. a domain with a wild card DNS entry).

This can be exploited to surf at a lower rate or surf free-of-charge by using a web proxy from a domain with a wild card DNS entry.

The vulnerability has been reported to affect all versions.

Solution
Implement a firewall and restrict access based on IP addresses.

Provided and/or discovered by
Zrekam

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area