Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space (%20).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Mercur_messaging | Mercur | 2005_sp2 (including) | 2005_sp2 (including) |
References