The remote host contains a PHP script that is vulnerable to cross-site
scripting attacks.
Description :
The remote host is running WEBppliance, a web hosting control panel
for Windows and Linux from Ensim.
The installed version of WEBppliance is prone to cross-site scripting
attacks because it fails to sanitize user-supplied input to the
ocw_login_username parameter of the login script before using it in
dynamically generated webpages.