VULNERABILITY INTELLIGENCE
CVE-2006-4922
CVSS score5 MEDIUM
EPSS probability7.11%
CISA KEVNot currently listed
Published2006-09-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions.