CyberSec.Space Logo
Back to CVE Browser

CVE-2006-4276

HIGH
7.5
CVSS Severity Score
EPSS Score0.0660%
EPSS Percentile34.37th
PublishedAug 21, 2006
Last ModifiedApr 16, 2026

Vulnerability Description

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to novalib/class.novaEdit.mysql.php.

Affected Platforms (CPE)

📦
Tutti Nova

Tutti Nova

<= 1.6

References & Advisories

🔗 http://secunia.com/advisories/21572
🔗 http://www.osvdb.org/28028
🔗 http://www.securityfocus.com/bid/19612
🔗 http://www.vupen.com/english/advisories/2006/3335
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/28471
🔗 https://www.exploit-db.com/exploits/2220
🔗 http://secunia.com/advisories/21572
🔗 http://www.osvdb.org/28028

Related Vulnerabilities

CVE-2004-245310.0

Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and a...

CVE-2006-42777.5

Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP c...

CVE-2006-446110.0

Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the pr...

CVE-2006-607610.0

Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier ...