CVE-2008-6638: Versalsoft HTTP File Upload Activex Control

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control (UUploaderSvrD.dll 6.0.0.35) allows remote attackers to delete arbitrary files via the RemoveFileOrDir method.

Affected products

  • Versalsoft HTTP File Upload Activex Control: version 6.0.0.35 only

Published 2009-04-07. Last modified 2026-06-16.