A vulnerability has been reported in the nBill component for Joomla!, which can be exploited by malicious people to disclose sensitive information.

Certain unspecified input in not properly sanitised before being used, which can be exploited to disclose sensitive information via directory traversal attacks.

The vulnerabilities are reported in 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10. Other versions may also be affected.

Solution
Update to 2.0.9 standard edition, 2.0.10 lite edition, or 1.2_10 and apply the patch.

Provided and/or discovered by
Reported as an 0-day.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.nbill.co.uk/newsflash/security-patch-for-all-versions-of-nbill.html

Deep Links
Links available to Secunia VIM customers