CVE:CVE-2006-2131
CNNVD:CNNVD-200605-010
Advanced Poll 2.0.4 的include/class_poll.php使用HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP头) 来识别客户端的IP地址，使得远程攻击者更易于伪造源 IP并绕过投票限制。
solution:Upgrade advanced_poll advanced_poll to a higher version than 2.0.4,and avoid the version 2.0.4