CVE-2005-1112
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 8.6%
from disclosure to weapon0 days
Published on NVDApr 16
1st PoCApr 13
exploitation probability
8.6%top 5% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/25420⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.