CVE:CVE-2006-4277
CNNVD:CNNVD-200608-323
Tutti Nova 1.6及早期版本中存在多个PHP远程文件包含漏洞，远程攻击者可以借助提交给：(1)include/novalib/class.novaAdmin.mysql.php和 (2) novalib/class.novaRead.mysql.php脚本的TNLIB_DIR参数内的URL来执行任意PHP代码。
solution:Upgrade tutti_nova tutti_nova to a higher version than 1.6,and avoid the version (,1.6]