CVEvulnerability
CVE-2010-2584
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-10-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an http URL in the DestURL property.
Affected configurations
• realpage module activex controls 1.0.0.9
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/41392 Vendor Advisory
- http://secunia.com/secunia_research/2010-118/ Vendor Advisory
- http://www.osvdb.org/68813 www.osvdb.org
- http://www.securityfocus.com/bid/44302 www.securityfocus.com
- http://secunia.com/advisories/41392 Vendor Advisory
- http://secunia.com/secunia_research/2010-118/ Vendor Advisory
- http://www.osvdb.org/68813 www.osvdb.org
- http://www.securityfocus.com/bid/44302 www.securityfocus.com