CVE Database
/

CVE-2010-4270

Back to search

CVE-2010-4270

Published: Nov 16, 2010

Modified: Sep 16, 2024

PUBLISHED

Description

Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010.

VendorProductVersions

n/a

n/a

affected
n/a

References

42186
third-party-advisory
x_refsource_SECUNIA
44719
vdb-entry
x_refsource_BID
69066
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now