QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-1657

Back to search

CVE-2005-1657

Published: May 18, 2005

Modified: Sep 17, 2024

PUBLISHED

Description

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml.

VendorProductVersions

n/a

n/a

affected
n/a

References

16225
vdb-entry
x_refsource_OSVDB
16220
vdb-entry
x_refsource_OSVDB
16222
vdb-entry
x_refsource_OSVDB
15234
third-party-advisory
x_refsource_SECUNIA
16223
vdb-entry
x_refsource_OSVDB
16221
vdb-entry
x_refsource_OSVDB
16224
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now