{"advisories":[{"id":"EUVD-2010-4243","source":"euvd","title":"Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-4243"}],"cve":"CVE-2010-4270","epss":{"score":0.01841},"mitre":{"cpes":[],"created":"2010-11-16T23:00:00+00:00","description":"Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2010/4xxx/CVE-2010-4270.json","references":["http://osvdb.org/69066","http://secunia.com/advisories/42186","http://www.nbill.co.uk/forum-smf/index.php/topic%2C2158.0.html","http://www.nbill.co.uk/newsflash/security-patch-for-all-versions-of-nbill.html","http://www.securityfocus.com/bid/44719"],"title":null,"updated":"2024-09-16T20:43:14.406000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:*:*:*:*:*:*","cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:lite:*:*:*:*:*","cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:std:*:*:*:*:*"],"created":"2010-11-17T01:00:05.403000+00:00","description":"Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010.","metrics":{"cvssV2_0":{"score":5.0,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N"},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2010/CVE-2010-4270.json","references":["http://osvdb.org/69066","http://secunia.com/advisories/42186","http://www.nbill.co.uk/forum-smf/index.php/topic%2C2158.0.html","http://www.nbill.co.uk/newsflash/security-patch-for-all-versions-of-nbill.html","http://www.securityfocus.com/bid/44719"],"title":null,"updated":"2026-06-16T23:24:28.900000+00:00","vendors":["joomla","joomla$PRODUCT$joomla\\!","netshinesoftware","netshinesoftware$PRODUCT$com_netinvoice"],"weaknesses":["CWE-22"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:*:*:*:*:*:*","cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:lite:*:*:*:*:*","cpe:2.3:a:netshinesoftware:com_netinvoice:*:*:std:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2010-11-16T23:00:00+00:00","provider":"mitre"},"description":{"data":"Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":5.0,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N"},"provider":"nvd"},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.01841},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["http://osvdb.org/69066","http://secunia.com/advisories/42186","http://www.nbill.co.uk/forum-smf/index.php/topic%2C2158.0.html","http://www.nbill.co.uk/newsflash/security-patch-for-all-versions-of-nbill.html","http://www.securityfocus.com/bid/44719"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-04-11T00:51:21.963000+00:00","provider":"nvd"},"vendors":{"data":["joomla","joomla$PRODUCT$joomla\\!","netshinesoftware","netshinesoftware$PRODUCT$com_netinvoice"],"providers":["nvd"]},"weaknesses":{"data":["CWE-22"],"providers":["nvd"]}}}