CVE-2002-0771: Undefined Security Weakness

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the 1 cvsroot or 2 sortby parameters...