CVE-2010-2584 - CVE House
Back to Database
Status published Medium CVE-2010-2584

The Upload method in the RealPage Module Upload ActiveX control...

Vulnerability Description

The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an http URL in the DestURL property.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-2584

Credits & Attribution

No credits recorded in the NVD database.

References

More from realpage

View All →
CVE-2010-2585
Multiple buffer overflows in the RealPage Module Upload ActiveX control...
Critical 10

Affected Vendor

Affected Software

module activex controls
Vulnerable Versions:
1.0.0.9

Timeline

Official Publish: October 26th, 2010
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.