Every CVE Search/ Get API key

CVE-2003-1235

BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via...

5.0 Medium

BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.

Exploit likelihood

2.32%Up 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.

Record
CVE-2003-1235
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.

Record
CVE-2003-1235
Updated
2026-11-02
EUVDEUVD-2003-1225 No score

BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.

Record
EUVD-2003-1225
Updated
2026-11-03
GitHub AdvisoriesGHSA-mwc4-h39r-g7g6 No score

BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via...

BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.

Record
GHSA-mwc4-h39r-g7g6
Updated
2026-11-02

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-1235 is a medium vulnerability (CVSS 5.0), published December 31, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.32%, the 83rd percentile. No source names a fixed version.

References

MoveEnter Open