80

https://www.exploit-db.com/exploits/48800www.exploit-db.com

adot@pwnbox:~/oscp/provinggrounds/easy/bbscute$ searchsploit -m 48800
  Exploit: CuteNews 2.1.2 - Remote Code Execution
      URL: https://www.exploit-db.com/exploits/48800
     Path: /usr/share/exploitdb/exploits/php/webapps/48800.py
    Codes: CVE-2019-11447
 Verified: True
File Type: Python script, ASCII text executable
Copied to: /home/adot/oscp/provinggrounds/easy/bbscute/48800.py

Edit script to remove the /CuteNews web dir so everything is running off the root dir of the website