CVE-2010-2584

The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an ht...

RealPage Module Upload ActiveX Control Multiple Vulnerabilities

The RealPage Module Upload ActiveX control, used with RealPage's OneSite Property Management Systems software and installed on the remote Windows host, reportedly is affected by several vulnerabilities : - The 'Upload' method in combination with the 'SourceFile' and 'DestURL' properties can be...

CVE-2010-2584

The CVE-2010-2584 entry concerns the RealPage Module Upload ActiveX Control (Realpage.dll 1.0.0.9) within RealPage Module ActiveX Controls. The Upload method does not properly constrain certain property values, enabling a remote attacker to read arbitrary files by supplying a filename in the Sour...