CVE-2005-1657 | BDVDB-2026-10322 Detail

Description#

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/16225
http://www.osvdb.org/16220
http://www.osvdb.org/16222
http://secunia.com/advisories/15234
http://www.osvdb.org/16223
http://www.osvdb.org/16221
http://www.osvdb.org/16224

Exploit#

No public exploit known

History#

Version 12005-05-18Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.