In the lean web server TinyWeb for Windows, attackers from the network can inject arbitrary code. An update helps.