CVE-2005-1656

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20").

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-18

Last modified

2024-09-17

Affected products

• Mercur Messaging (Mercur)

References

• http://secunia.com/advisories/15234
• http://www.osvdb.org/16218