← Database

CVE-2006-4922

MEDIUM CVSS: 5.0 Published: 2006-09-21 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions.

Affected Platforms

Siteatschool Siteatschool

Weakness Type

NVD-CWE-Other

References