CVE-2003-1235

CVE-2003-1235 affects BRW WebWeaver 1.03. An attacker can remotely request testcgi.exe to cause the server to disclose environment variables and the current working directory, exposing sensitive server information. The description explicitly identifies the affected component and the data exposed ...

CVE-2004-2128

Cross-site scripting XSS vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll...

CVE-2004-2128

CVE-2004-2128 concerns a cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 . According to the CVE records, the issue allows remote attackers to execute arbitrary script as other users by crafting a malicious query string to ISAPISkeleton.dll . The vulnerability is described across mu...

CVE-2003-1165

CVE-2003-1165 concerns BRS WebWeaver 1.06 and earlier. The vulnerability is a buffer overflow in processing an HTTP request with a long User-Agent header, allowing remote attackers over the network to trigger a crash (DoS) and potentially execute arbitrary code. The NVD entry lists a base score o...

CVE-2004-2128

Cross-site scripting XSS vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll...

WebWeaver FTP RETR Command Remote DoS

Binary data 1816.prm...

BRS Webweaver crossite scripting

ISAPISkeleton.dll Crossite scripting...

BRS WebWeaver Webserver Cross Site Scripting Vulnerability

BRS WebWeaver Webserver Cross Site Scripting Vulnerability ================================================ Whatis: ===== BRS WebWeaver is a free personal web server that runs on the Windows platform. Version: ====== V 1.07 Exploiting: =======...

BRS Webweaver 1.0.7 - 'ISAPISkeleton.dll' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9516/info BRS WebWeaver has been reported prone to a cross-site scripting vulnerability. An attacker may create a malicious link to the vulnerable server that includes embedded HTML and script code. If this link is followed by a victim user, hostile code...

BRS Webweaver 1.0.7 - ISAPISkeleton.dll Cross-Site Scripting

BRS Webweaver 1.0.7 - ISAPISkeleton.dll Cross-Site Scripting source: https://www.securityfocus.com/bid/9516/info BRS WebWeaver has been reported prone to a cross-site scripting vulnerability. An attacker may create a malicious link to the vulnerable server that includes embedded HTML and script...

BRSwebweaverXSS.txt

BRS WebWeaver Webserver Cross Site Scripting Vulnerability ================================================ Whatis: ===== BRS WebWeaver is a free personal web server that runs on the Windows platform. Version: ====== V 1.07 Exploiting: =======...

CVE-2003-1165

Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with a long User-Agent header...

CVE-2003-1235

BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory...

Webweaver DoS

Large number of data in GET request causes server to crash...

BRS WebWeaver 1.06 remote DoS vulnerability

/ m00 security advistory 004 BRS WebWeaver remote DoS vulnerability www.m00security.org / --------------------------------- Product: BRS WebWeaver Version: 1.06 and bellow OffSite: www.brswebweaver.com --------------------------------- Overview: BRS WebWeaver is an HTTP Server with support for CG...

BRS Webweaver 1.06 - HTTPd User-Agent Remote Denial of Service

BRS Webweaver 1.06 - HTTPd User-Agent Remote Denial of Service // source: https://www.securityfocus.com/bid/8947/info It has been reported that BRS WebWeaver may be prone to a denial of service issue that may allow a remote attacker to cause the software to crash or hang. The issue presents itsel...

BRS Webweaver 1.06 - HTTPd 'User-Agent' Remote Denial of Service

// source: https://www.securityfocus.com/bid/8947/info It has been reported that BRS WebWeaver may be prone to a denial of service issue that may allow a remote attacker to cause the software to crash or hang. The issue presents itself when the server receives a request containing a large string...

BRSwebweaver.txt

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: Anonymous Surfing product: BRS WebWeaver 1.06 vendor: http://www.brswebweaver.com risk: high date: 09/24/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/027en http://f0kp.iplus.ru/bz/027ru contact...

CVE-2003-0409

Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP 1 POST or 2 HEAD request...

BRS Webweaver 1.0 - Error Page Cross-Site Scripting

BRS Webweaver 1.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/8037/info BRS WebWeaver is prone to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, BRS WebWeaver includes user requests when...