Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2) editu.php, and (3) uidx.php in siteadmin/.
https://www.exploit-db.com/exploits/5388
https://exchange.xforce.ibmcloud.com/vulnerabilities/41679
http://www.vupen.com/english/advisories/2008/1117