CVE-2006-4919: Siteatschool

Low severity, CVSS 2.6. EPSS: 2.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter.

Affected products

• Siteatschool Siteatschool: up to and including 2.4.02

Published 2006-09-21. Last modified 2026-06-16.