CVE-2006-7166

IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via "a specific JSP URL."

• http://secunia.com/advisories/24478Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21243541Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24011720Vendor Advisory
• http://www.securityfocus.com/bid/22991
• http://www.vupen.com/english/advisories/2007/0970
• http://secunia.com/advisories/24478Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21243541Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24011720Vendor Advisory
• http://www.securityfocus.com/bid/22991
• http://www.vupen.com/english/advisories/2007/0970

Published

Mar 20, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-7160The Sandbox.sys driver in Outpost Firewall PRO 4.0, and poss…
• CVE-2006-7161SQL injection vulnerability in giris_yap.asp in Hazir Site 2…
• CVE-2006-7162PuTTY 0.59 and earlier uses weak file permissions for (1) pp…
• CVE-2006-7163DreameeSoft Password Master 1.0 stores the database in an un…
• CVE-2006-7164SimpleFileServlet in IBM WebSphere Application Server 5.0.1 …
• CVE-2006-7165IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 a…
• CVE-2006-7167Unspecified vulnerability in ProRat Server 1.9 Fix2 allows r…
• CVE-2006-7168PHP remote file inclusion vulnerability in includes/not_mem.…
• CVE-2006-7169PHP remote file inclusion vulnerability in includes/header_s…
• CVE-2006-7170Multiple SQL injection vulnerabilities in Koan Software Mega…
• CVE-2006-7171product_review.php in Koan Software Mega Mall allows remote …
• CVE-2006-7172Multiple SQL injection vulnerabilities in php-stats.recphp.p…