CVE-2005-1657

Mercur Messaging 2005 SP2 is affected by multiple directory traversal vulnerabilities. An attacker can remotely perform unauthorized file operations via Folder.Id parameters to deletefolder.ctml, deletemessage.ctml, origmessage.ctml, readmessage.ctml; the Message.Id parameter to editmessage.ctml;...