Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php, and (2) starnet/themes/editable/main.inc.php.
References
Configurations
History
No history.
Information
Published : 2006-09-21 01:07
Updated : 2024-02-28 11:01
NVD link : CVE-2006-4920
Mitre link : CVE-2006-4920
CVE.ORG link : CVE-2006-4920
JSON object : View
Products Affected
siteatschool
- siteatschool
CWE