← back
CVE-2005-1657

CVE-2005-1657

EPSS 1.9%
Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/15234http://www.osvdb.org/16220http://www.osvdb.org/16221http://www.osvdb.org/16222http://www.osvdb.org/16223http://www.osvdb.org/16224http://www.osvdb.org/16225