CVE-2010-2584

2010-10-2618:00:00

flexera

www.cve.org

realpage

activex control

file read

remote attackers

security vulnerability

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

70.8%

JSON

The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an http URL in the DestURL property.