CVE:CVE-2007-0845
CNNVD:CNNVD-200702-146
Advanced Poll 2.0.0版本至2.0.5-dev版本中的admin/index.php允许远程攻击者通过获得一个有效的会话标识符并设置uid参数至1，绕过权限并获得管理员特权。
solution:Upgrade advanced_poll advanced_poll to a higher version than 2.0.2,2.0.3,2.0.4,2.0.5,and avoid the version 2.0.2,2.0.3,2.0.4,2.0.5