CVE-2006-4921
Site@School <2.4.03 - RCE
Title source: llmDescription
PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information.
Exploits (1)
References (5)
Scores
EPSS
0.0425
EPSS Percentile
88.8%
Details
Status
published
Products (2)
siteatschool/siteatschool
2.4.02
siteatschool/siteatschool
< 2.4.03
Published
Sep 21, 2006
Tracked Since
Feb 18, 2026