CVE:CVE-2006-4922
CNNVD:CNNVD-200609-374
Site@School (S@S)的starnet/editors/htmlarea/popups/images.php中未指定的文件上传漏洞，远程攻击者可以通过可执行的扩展名上传并执行任意文件。
solution:Upgrade siteatschool siteatschool to a higher version than 2.4.02,and avoid the version (,2.4.02]