CVE:CVE-2005-1656
CNNVD:CNNVD-200505-1097
Mercur Messaging 2005 SP2允许远程攻击者通过一个以十六进制编码空格("%20")结尾的URL读取.ctml文件的源码。
solution:Upgrade mercur mercur_messaging to a higher version than 2005_sp2,and avoid the version 2005_sp2