Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability

novalib/class.novaEdit.mysql.php 代码中对TNLIBDIR变量校验不严格。 利用方法： !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63860' ssvid version = '1.0' author = '皮皮' vulDate = '2006-08-21'...

CVE-2006-4277: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the TNLIBDIR parameter to 1 include/novalib/class.novaAdmin.mysql.php and 2 novalib/class.novaRead.mysql.php. NOTE: the provenance of this information...

CVE-2006-4276: Undefined Security Weakness

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the TNLIBDIR parameter to novalib/class.novaEdit.mysql.php...

Tutti Nova 1.6 - TNLIB_DIR Remote File Inclusion

Tutti Nova 1.6 - TNLIBDIR Remote File Inclusion ============================================================================================== Tutti Nova = v1.6 TNLIBDIR Remote File Inclusion Exploit ===============================================================================================...

Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== Tutti Nova = 1.6 TNLIBDIR Remote File Include Vulnerability ===============================================================...