Vulnerability in Brs Webweaver

CVE-2003-1235

BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.

EPSS: 0.023 (81.7th percentile) — read the EPSS interpretation.

Affected products

  • Brs Webweaver — versions 1.0.1, 1.0.2, 1.0.3
  • N/a — versions n/a

References