Secunia Security Advisory – rUnViRuS has reported a vulnerability in PollVote, which can be exploited by malicious people to compromise a vulnerable system. Input passed to the pollname parameter in pollvote.php isn’t properly verified, before it is used to include files. This can be exploited to include arbitrary files from external and local resources.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41571/sa17574.txt
Source: https://packetstormsecurity.com/files/41571/Secunia-Security-Advisory-17574.html