CVE-2005-1656: Mercur Messaging

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20").

Affected products

• Mercur Mercur Messaging: version 2005_sp2 only

Published 2005-05-18. Last modified 2026-06-16.