Description
Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitrary PHP code via the (1) id, (2) template_set, or (3) action parameter.
References
- 2743 vdb-entry
- 20031025 Advanced Poll : PHP Code Injection, File Include, Phpinfo mailing-list
- advanced-poll-comments-file-include(29396) vdb-entry
- 8890 vdb-entry
- 20061008 Advanced Poll v2.02 :) <= Remote File Inclusion mailing-list
- 10068 third-party-advisory
- Advanced Poll v2.02 :) <= Remote File Inclusion mailing-list
- advancedpoll-php-injection(13513) vdb-entry