GCVE - cpe:2.3:a:siteatschool:siteatschool:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siteatschool:siteatschool:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Siteatschool (`35abeda7-d1a3-5d7b-bb2b-3675d1f56e2a`)
Product	Siteatschool (`a5356db7-8038-57b2-a231-9ca66583fe68`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:sourceforge/siteatschool`	purl2cpe	2026-06-01 10:17:12.508671

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-0129`	vulnerable	2026-06-08 04:50:10.328462	Details available SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attackers to execute arbitrary SQL commands via the album_name parameter. Published: 2008-01-08T11:00:00.000Z Updated: 2024-08-07T07:32:23.895Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/39417 http://www.securityfocus.com/bid/27120 https://www.exploit-db.com/exploits/4832	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4922`	vulnerable	2026-06-08 04:49:19.202991	Details available Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions. Published: 2006-09-21T01:00:00.000Z Updated: 2024-08-07T19:32:22.092Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=115869368313367&w=2 https://www.exploit-db.com/exploits/2374 http://securitytracker.com/id?1016887 http://www.securityfocus.com/bid/20053	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4921`	vulnerable	2026-06-08 04:49:19.201547	Details available PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information. Published: 2006-09-21T01:00:00.000Z Updated: 2024-08-07T19:32:22.337Z Open on db.gcve.eu Reference links http://www.osvdb.org/28941 http://www.vupen.com/english/advisories/2006/3664 http://marc.info/?l=bugtraq&m=115869368313367&w=2 http://secunia.com/advisories/21975 http://securitytracker.com/id?1016887	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4920`	vulnerable	2026-06-08 04:49:19.201218	Details available Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php, and (2) starnet/themes/editable/main.inc.php. Published: 2006-09-21T01:00:00.000Z Updated: 2024-08-07T19:32:22.849Z Open on db.gcve.eu Reference links http://www.osvdb.org/28942 https://www.exploit-db.com/exploits/2374 http://www.vupen.com/english/advisories/2006/3664 http://marc.info/?l=bugtraq&m=115869368313367&w=2 http://secunia.com/advisories/21975	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4919`	vulnerable	2026-06-08 04:49:19.200782	Details available Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter. Published: 2006-09-21T01:00:00.000Z Updated: 2024-08-07T19:32:22.251Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=115869368313367&w=2 https://www.exploit-db.com/exploits/2374 http://www.vupen.com/english/advisories/2006/3664 http://secunia.com/advisories/21975 http://securitytracker.com/id?1016887	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Siteatschool

Notes

PURL mappings

Vulnerability references

Contribute