CVE:CVE-2006-4919
CNNVD:CNNVD-200609-371
Site@School (S@S) 2.4.02及更早版本的starnet/editors/htmlarea/popups/images.php中存在目录遍历漏洞，远程攻击者可以通过dir参数（该参数中包含..）读取任意文件。
solution:Upgrade siteatschool siteatschool to a higher version than 2.4.02,and avoid the version (,2.4.02]