CVE-2005-0425

Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.

• http://secunia.com/advisories/14274Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24008814Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24008815Patch, Vendor Advisory
• http://secunia.com/advisories/14274Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24008814Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24008815Patch, Vendor Advisory

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0419Multiple heap-based buffer overflows in 3Com 3CServer allow …
• CVE-2005-0420Microsoft Outlook Web Access (OWA), when used with Exchange,…
• CVE-2005-0421DelphiTurk FTP 1.0 stores usernames and passwords in the pro…
• CVE-2005-0422DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores use…
• CVE-2005-0423SQL injection vulnerability in login.asp in ASPjar Guestbook…
• CVE-2005-0424Unknown vulnerability in the delete.asp program in certain v…
• CVE-2005-0426Unknown vulnerability in Solaris 8 and 9 allows remote attac…
• CVE-2005-0427The ebuild of Webmin before 1.170-r3 on Gentoo Linux include…
• CVE-2005-0428The DNSPacket::expand method in dnspacket.cc in PowerDNS bef…
• CVE-2005-0429Direct code injection vulnerability in forumdisplay.php in v…
• CVE-2005-0430The Quake 3 engine, as used in multiple game packages, allow…
• CVE-2005-0431Barracuda Spam Firewall 3.1.10 and earlier does not restrict…