Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability

novalib/class.novaEdit.mysql.php 代码中对TNLIBDIR变量校验不严格。 利用方法： !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63860' ssvid version = '1.0' author = '皮皮' vulDate = '2006-08-21'...

Tutti Nova 1.6 - TNLIB_DIR Remote File Inclusion

Tutti Nova 1.6 - TNLIBDIR Remote File Inclusion ============================================================================================== Tutti Nova = v1.6 TNLIBDIR Remote File Inclusion Exploit ===============================================================================================...

Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== Tutti Nova = 1.6 TNLIBDIR Remote File Include Vulnerability ===============================================================...