CVE:CVE-2006-4920
CNNVD:CNNVD-200609-360
Site@School (S@S)中存在多个PHP远程文件包含漏洞，远程攻击者可以通过(1) starnet/modules/sn_allbum/slideshow.php或(2) starnet/themes/editable/main.inc.php的cmsdir参数中的URL执行任意PHP代码。
solution:Upgrade siteatschool siteatschool to a higher version than 2.4.02,and avoid the version (,2.4.02]