Description Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20"). References 15234 third-party-advisory 16218 vdb-entry