source: https://www.securityfocus.com/bid/26358/info
MS-TopSites is prone to an unauthorized-access vulnerability and an HTML-injection vulnerability because the application fails to sufficiently sanitize user-supplied data.
An attacker can exploit these issues to gain elevated privileges on the affected application, execute arbitrary code within the context of the webserver, and steal cookie-based authentication credentials.
PhpNuke (add-on) MS TopSites Edit Exploit And Html Injection