Vulnerabilities

TI-2006-04130 CVE-2006-4277 · GHSA-78fg-x9p2-5892

Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow…

LOW 39

Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to (1) include/novalib/class.novaAdmin.mysql.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03245 Published 2006-08-21 No fix listed

TI-2006-04129 CVE-2006-4276 · GHSA-22pp-q7jc-mc64

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote…

LOW 39

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to novalib/class.novaEdit.mysql.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03248 Published 2006-08-21 No fix listed

TI-2004-02323 CVE-2004-2453 · GHSA-6cpw-jr54-9c26

Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when…

MEDIUM 46

Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01703 Published 2005-08-20 No fix listed

Vulnerabilities

Filters

Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow…

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote…

Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when…