CVE-2003-1235

CVE-2003-1235 describes an information disclosure vulnerability in BRW WebWeaver 1.03, allowing remote attackers to obtain sensitive server environment details. This is achieved by requesting testcgi.exe, which then lists environment variables and the current working directory. With a CVSS score of 5.0, this low-complexity network-based attack could lead to a partial compromise of confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this nearly two-decade-old vulnerability.