Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BRS WebWeaver远程信息泄露漏洞
Vulnerability Description
BRS WebWeaver是一款集成小型快速的HTTP和FTP服务程序，提供目录保护功能，适用于Windows 9x/NT操作系统。 BRS WebWeaver包含的testcgi.exe没有设置任何访问限制，远程攻击者可以利用这个脚本获得大量系统敏感信息。 默认安装下，会安装'scripts/testcgi.exe'CGI文件，此脚本会输入大量系统敏感信息，并且任何访问限制，攻击者可以直接请求这个文件获得信息，利用这些信息进一步对系统进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A