GCVE - cpe:2.3:a:mercur:mercur_messaging:2005

Approved changes feed: RSS · Atom

cpe:2.3:a:mercur:mercur_messaging:2005_sp2:*:*:*:*:*:*:*

part: a version: 2005_sp2 update: *

Vendor	Mercur (`dac3f7f3-6808-5c1b-8322-4ccd24dae7f1`)
Product	Mercur Messaging (`06d49e13-dd70-5251-98bb-10dfab081a01`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-1657`	vulnerable	2026-06-08 04:48:27.156432	Details available Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml. Published: 2005-05-18T04:00:00.000Z Updated: 2024-09-17T00:45:32.687Z Open on db.gcve.eu Reference links http://www.osvdb.org/16225 http://www.osvdb.org/16220 http://www.osvdb.org/16222 http://secunia.com/advisories/15234 http://www.osvdb.org/16223	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1656`	vulnerable	2026-06-08 04:48:27.156042	Details available Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20"). Published: 2005-05-18T04:00:00.000Z Updated: 2024-09-17T02:16:50.155Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15234 http://www.osvdb.org/16218	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.