CVE-2012-6514
- EPSS 1.21%
- Veröffentlicht 24.01.2013 01:55:05
- Zuletzt bearbeitet 29.04.2026 01:13:23
Cross-site scripting (XSS) vulnerability in the nBill (com_nbill) component 2.3.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the message parameter in an income action to administrator/index.php.
CVE-2008-7302
- EPSS 1.03%
- Veröffentlicht 05.10.2011 02:56:24
- Zuletzt bearbeitet 16.06.2026 23:04:01
SQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving "knowledge of ... the contents of an encrypted fil...
- EPSS 1.63%
- Veröffentlicht 17.11.2010 01:00:05
- Zuletzt bearbeitet 16.06.2026 23:24:28
Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vect...
CVE-2008-3498
- EPSS 2.43%
- Veröffentlicht 06.08.2008 18:41:00
- Zuletzt bearbeitet 16.06.2026 22:55:56
SQL injection vulnerability in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in an orders action to index.php. NOTE: some of these details are obtained from...