Vulnerabilities > CVE-2006-4922 - Input Validation vulnerability in Site@School

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
siteatschool
exploit available
NVD
Published: 2006-09-21
Updated: 2017-10-19

Summary

Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions.

Vulnerable Configurations

Part Description Count
Application
Siteatschool
1

Exploit-Db

descriptionSite@School <= 2.4.02 Advisory / Remote File Upload Exploit. CVE-2006-4920,CVE-2006-4921,CVE-2006-4922. Webapps exploit for php platform
fileexploits/php/webapps/2374.pl
idEDB-ID:2374
last seen2016-01-31
modified2006-09-15
platformphp
port
published2006-09-15
reportersimo64
sourcehttps://www.exploit-db.com/download/2374/
titleSite@School <= 2.4.02 - Remote File Upload Exploit
typewebapps

References