Cute news versions 1.3.6 and below have a world writable news.txt file that allows for site defacement.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34203/cutenews136.txt
Source: https://packetstormsecurity.com/files/34203/cutenews136.txt.html