CVE-2006-4922: Siteatschool

Medium severity, CVSS 5.0. EPSS: 7% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions.

Affected products

• Siteatschool Siteatschool: up to and including 2.4.02

Published 2006-09-21. Last modified 2026-06-16.