Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space (%20).
Affected Software
Name |
Vendor |
Start Version |
End Version |
Mercur_messaging |
Mercur |
2005_sp2 (including) |
2005_sp2 (including) |
References