CVE-2010-2584

EUVD-2010-2588
The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an http URL in the DestURL property.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
Affected Products (NVD)
VendorProductVersion
realpagemodule_activex_controls
1.0.0.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/41392
http://secunia.com/secunia_research/2010-118/
http://www.osvdb.org/68813
http://www.securityfocus.com/bid/44302
http://secunia.com/advisories/41392
http://secunia.com/secunia_research/2010-118/
http://www.osvdb.org/68813
http://www.securityfocus.com/bid/44302