CVE:CVE-2006-6271
CNNVD:CNNVD-200612-039
PHPOLL存在多个跨站脚本攻击(XSS)漏洞。远程攻击者可以借助对(1)index.php,(2)info.php和对admin/下的(3)index.php，(4)votanti.php，(5)risultati_config.php，(6)modifica_band.php,(7)band_editor.php和(8)config_editor.php的语言参数来注入任意web脚本或HTML。
solution:Upgrade phpoll phpoll to a higher version than 0.96,and avoid the version 0.96