Description
SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
References
- advancedpoll-classpoll-sql-injection(26152) vdb-entry
- http://evuln.com/vulns/131/summary.html
- 19899 third-party-advisory
- ADV-2006-1603 vdb-entry
- 25167 vdb-entry