Unrated severityNVD Advisory· Published Nov 17, 2010· Updated Jun 16, 2026
CVE-2010-4270
CVE-2010-4270
Description
Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010.
Affected products
4cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:*:*:*:*:*:*range: <=1.2_10
- cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:lite:*:*:*:*:*range: <=2.0.10
- cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:std:*:*:*:*:*range: <=2.0.9
Patches
Vulnerability mechanics
References
5- www.nbill.co.uk/newsflash/security-patch-for-all-versions-of-nbill.htmlnvdPatchVendor Advisory
- secunia.com/advisories/42186nvdVendor Advisory
- osvdb.org/69066nvd
- www.nbill.co.uk/forum-smf/index.php/topic%2C2158.0.htmlnvd
- www.securityfocus.com/bid/44719nvd
News mentions
0No linked articles in our index yet.