Hack with confidence.
Page secret-administrative-pages.php is vulnerable to at least the following:
The "page" input parameter is vulnerable to insecure direct object reference. Fuzzing the parameter with administrative page names or system file paths is likely to yield results.
Platform Path Disclosure: Internal system paths are disclosed by this page under certain conditions.
Application Path Disclosure: Application file paths are disclosed by this page under certain conditions.
Information Disclosure: This page gives away internal system information, configuration information, paths, filenames, or other private information.
Secret Administrative Pages: These pages are obscured by not being linked from other pages but they can be found using other vulnerabilities such as directory browsing, robots.txt, and local file inclusion.