Description
BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.
References
- 20030331 BRS WebWeaver: full disclosure mailing-list
- 7283 vdb-entry
- webweaver-testcgi-info-disclosure(11686) vdb-entry