Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4921.
AI-analyzed exploit summary This exploit demonstrates a remote file upload vulnerability in Site@School 2.4.02 and below, allowing arbitrary command execution via a malicious PHP file upload. The script automates the upload process and provides a shell interface upon successful exploitation.
Description
PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates a remote file upload vulnerability in Site@School 2.4.02 and below, allowing arbitrary command execution via a malicious PHP file upload. The script automates the upload process and provides a shell interface upon successful exploitation.