CVE

Id
46854  
CVE No.
CVE-2010-4270  
Status
Candidate  
Description
Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010.  
Phase
Assigned (20101116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
512226 46854 CVE-2010-4270 CONFIRM:http://www.nbill.co.uk/forum-smf/index.php/topic,2158.0.html  View
512227 46854 CVE-2010-4270 CONFIRM:http://www.nbill.co.uk/newsflash/security-patch-for-all-versions-of-nbill.html  View
512228 46854 CVE-2010-4270 BID:44719  View
512229 46854 CVE-2010-4270 URL:http://www.securityfocus.com/bid/44719  View
512230 46854 CVE-2010-4270 OSVDB:69066  View
512231 46854 CVE-2010-4270 URL:http://osvdb.org/69066  View
512232 46854 CVE-2010-4270 SECUNIA:42186  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37622 JVNDB-2010-003407 IBM Systems Director の reset_diragent_keys における権限を取得される脆弱性 IBM Systems Director の Common エージェントの reset_diragent_keysは、754 パーミッションを持つため、権限を取得される脆弱性が存在します。 CVE-2010-4274 46854 4.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003407.html  View