Unauthenticated request smuggling via Content-Length overflow

Integer overflow in GeneralSandman TinyWeb before 2.03 allows remote attackers to smuggle requests via oversized Content-Length values. The _Val routine in SRC/xBase.pas accumulates Content-Length digits in a signed 32-bit integer without checking overflow, so TinyWeb reads a wrapped body length and parses buffered bytes as another request. Exploitation requires no authentication or user interaction, while request desynchronization requires a persistent connection and can bypass frontend filtering, poison cached responses, or expose another user's request data.