SCO Security Advisory – Cross-site scripting vulnerability in docview (htdig) under OpenServer 5.0.7 and OpenServer 6.0.0 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41231/SCOSA-2005.46.txt
Source: https://packetstormsecurity.com/files/41231/SCOSA-2005.46.txt.html