This archive contains all of the 229 exploits added to Packet Storm in October, 2011.
41fe2e2d00de87bc1210b2622899e59fOracle DataDirect ODBC drivers HOST attribute arsqls24.dll stack-based buffer overflow proof of concept exploit that creates a malicious .oce file.
198b80a5a60c8ea162c7e3b9369d4d8aPlotLineCentral suffers from an integer overflow vulnerability.
9d304deba97639b78f2a7934a7a12fdbYaTFTPSvr TFTP Server version 1.0.1.200 suffers from a directory traversal vulnerability.
a14850bed438255989b56cee1e86eb8eMicrosys PROMOTIC version 8.1.4 suffers from a code execution vulnerability due to an uninitialized pointer that is exploitable via the GetPromoticSite method of the PmTable.ocx active-x control.
a4366e73a34cbc46b0af798ef0991774The jbShop e107 CMS plugin suffers from a remote SQL injection vulnerability.
92883024988285f6be29d6a1caac6523Hyperic HQ Enterprise|E version 4.5.1 suffers from cross site request forgery and cross site scripting vulnerabilities.
4bcd5629ccdfcadc706a41eceeee2068The Facebook My Phrase Box application suffers from a remote SQL injection vulnerability.
015217b58f0a572824cae21126a2910aWordPress Classipress Theme versions 3.1.4 and below suffer from a stored cross site scripting vulnerability.
0409fa57d2c45c830e98188edfa93f6cDomain Shop suffers from a cross site scripting vulnerability.
10302e6a4caee7ea43f771502713c2b1vBulletin version 4.1.7 Beta 1 suffers from multiple remote file inclusion vulnerabilities.
50345d9a02d198f12651f815275aedecBroadWin WebAccess SCADA/HMI client remote code execution exploit that takes advantage of an arbitrary file creation vulnerability in bwocxrun.ocx.
40fadf2a23f346513ad0ebea66f00d24Slang Media Group suffers from a remote shell upload vulnerability.
cf8fd02455e971372d96608b65e4ab84The WordPress WP Glossary plugin suffers from a remote SQL injection vulnerability.
ff662889ee4484b033b7aae459318f80Smbwebdemo suffers from multiple remote SQL injection vulnerabilities.
eeea66be2442baf92d8472e12732c6acAttraction Website Design suffers from a remote SQL injection vulnerability.
5f8cd350fae1c3f7aa9861de69eb52a4360ideas suffers from a remote SQL injection vulnerability.
513bf24b0ca3f91a58d27ce8ce57c5f3HighCMS suffers from an overflow vulnerability when handling the pageid variable.
f60f1f69807e367dd262aadbd20f87ffSites powered by Melvin Productions suffer from a remote SQL injection vulnerability.
6ba875183f4ea64558f58a7cb4c9a666The Joomla HM Community component suffers from cross site scripting and remote SQL injection vulnerabilities.
22e52b270066a5284d0d7adf46a9f979Mndajans Script suffers from a remote SQL injection vulnerability.
fdfd19b5e6789c0cc7738143ed4c3d5cPHP Photo Album version 0.4.1.16 suffers from cross site scripting and local file disclosure vulnerabilities.
118e03a56f741301c45fd892923955a8ZTE ZXDSL version 831IIV7.5.0a_Z29_OV suffers from authentication bypass and cross site request forgery vulnerabilities.
4d3462a8e3ce3c7d09907c3b8f266118The Joomla Techfolio component version 1.0 suffers from a remote SQL injection vulnerability.
12d3c0b629e0baf9244e1349251356eaMaxdome's Portal suffers from a remote SQL injection vulnerability.
5f0958c01b1aea58d6b7d7f534063169