Summary
The remote host is running PHP TopSites, a PHP/MySQL-based customizable TopList script.
There is a vulnerability in this software which allows an attacker to access the admin/setup interface without authentication.
Solution
Limit access to admin directory using, eg, .htaccess.
