CVE-2010-2584

The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain…

published October 26, 2010

CVSS
—
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an http URL in the DestURL property.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01403 · 72.3th percentile
Published
2010-10-26T18:00Z
EPSS history
Timeline
  • 26 OCT 18:00Z
    The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain…
    cvelistv5