# CVEs published 2010-11-01

18 CVEs were published on November 1, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4143](https://cve.now/CVE-2010-4143.md): SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-4144](https://cve.now/CVE-2010-4144.md): SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parame (no CVSS)
- [CVE-2010-4145](https://cve.now/CVE-2010-4145.md): Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to down (no CVSS)
- [CVE-2010-4146](https://cve.now/CVE-2010-4146.md): Cross-site scripting (XSS) vulnerability in Attachmate Reflection for the Web 2008 R2 (builds 10.1.569 and earlier), 2008 R1, and 9.6 and ea (no CVSS)
- [CVE-2010-4147](https://cve.now/CVE-2010-4147.md): Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers t (no CVSS)
- [CVE-2010-4148](https://cve.now/CVE-2010-4148.md): Directory traversal vulnerability in AnyConnect 1.2.3.0, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\\ (no CVSS)
- [CVE-2010-4149](https://cve.now/CVE-2010-4149.md): Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary (no CVSS)
- [CVE-2010-4030](https://cve.now/CVE-2010-4030.md): Cross-site scripting (XSS) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-4031](https://cve.now/CVE-2010-4031.md): Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via u (no CVSS)
- [CVE-2010-4032](https://cve.now/CVE-2010-4032.md): Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack th (no CVSS)
- [CVE-2010-4100](https://cve.now/CVE-2010-4100.md): Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2010-4101](https://cve.now/CVE-2010-4101.md): Cross-site scripting (XSS) vulnerability in HP Insight Recovery before 6.2 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2010-4102](https://cve.now/CVE-2010-4102.md): Unspecified vulnerability in HP Insight Recovery before 6.2 allows remote attackers to read arbitrary files via unknown vectors. (no CVSS)
- [CVE-2010-4103](https://cve.now/CVE-2010-4103.md): Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown v (no CVSS)
- [CVE-2010-4104](https://cve.now/CVE-2010-4104.md): Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to read arbitrary files via unknown vectors. (no CVSS)
- [CVE-2010-4105](https://cve.now/CVE-2010-4105.md): Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain (no CVSS)
- [CVE-2010-4106](https://cve.now/CVE-2010-4106.md): Cross-site request forgery (CSRF) vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authenticat (no CVSS)
- [CVE-2010-4142](https://cve.now/CVE-2010-4142.md): Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-11-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.