# CVEs published 2010-11-01

18 CVEs were published on November 1, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4143](https://cve.now/CVE-2010-4143.md): SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute… (no CVSS)
- [CVE-2010-4144](https://cve.now/CVE-2010-4144.md): SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id… (no CVSS)
- [CVE-2010-4145](https://cve.now/CVE-2010-4145.md): Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to… (no CVSS)
- [CVE-2010-4146](https://cve.now/CVE-2010-4146.md): Cross-site scripting (XSS) vulnerability in Attachmate Reflection for the Web 2008 R2 (builds 10.1.569 and earlier), 2008 R1, and 9.6 and… (no CVSS)
- [CVE-2010-4147](https://cve.now/CVE-2010-4147.md): Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers… (no CVSS)
- [CVE-2010-4148](https://cve.now/CVE-2010-4148.md): Directory traversal vulnerability in AnyConnect 1.2.3.0, and possibly earlier, allows remote FTP servers to write arbitrary files via a… (no CVSS)
- [CVE-2010-4149](https://cve.now/CVE-2010-4149.md): Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write… (no CVSS)
- [CVE-2010-4030](https://cve.now/CVE-2010-4030.md): Cross-site scripting (XSS) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject… (no CVSS)
- [CVE-2010-4031](https://cve.now/CVE-2010-4031.md): Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via… (no CVSS)
- [CVE-2010-4032](https://cve.now/CVE-2010-4032.md): Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack… (no CVSS)
- [CVE-2010-4100](https://cve.now/CVE-2010-4100.md): Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files… (no CVSS)
- [CVE-2010-4101](https://cve.now/CVE-2010-4101.md): Cross-site scripting (XSS) vulnerability in HP Insight Recovery before 6.2 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2010-4102](https://cve.now/CVE-2010-4102.md): Unspecified vulnerability in HP Insight Recovery before 6.2 allows remote attackers to read arbitrary files via unknown vectors. (no CVSS)
- [CVE-2010-4103](https://cve.now/CVE-2010-4103.md): Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown… (no CVSS)
- [CVE-2010-4104](https://cve.now/CVE-2010-4104.md): Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to read arbitrary files via unknown vectors. (no CVSS)
- [CVE-2010-4105](https://cve.now/CVE-2010-4105.md): Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and… (no CVSS)
- [CVE-2010-4106](https://cve.now/CVE-2010-4106.md): Cross-site request forgery (CSRF) vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the… (no CVSS)
- [CVE-2010-4142](https://cve.now/CVE-2010-4142.md): Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-11-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.