This script is Copyright (C) 2004-2011 Tenable Network Security, Inc.
A web application on the remote host has a cross-site scripting
The remote host is running ViewCVS, a tool written in Python to
browse CVS repositories via the web.
The version of ViewCVS running on the remote host has a cross-site
scripting vulnerability. Input to the 'viewcvs' parameter is not
properly sanitized. A remote attacker could exploit this by tricking
a user into requesting a maliciously crafted URL, resulting in the
execution of arbitrary script code.
See also :
Upgrade to the latest version of this software.
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.7
Public Exploit Available : false