CVE-2003-1178 Information

Description

Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitrary PHP code via the (1) id (2) template_set or (3) action parameter.

Reference

http://attrition.org/pipermail/vim/2006-October/001080.html http://secunia.com/advisories/10068 http://www.osvdb.org/2743 http://www.securityfocus.com/archive/1/342493 http://www.securityfocus.com/archive/1/448007/100/0/threaded http://www.securityfocus.com/bid/8890 https://exchange.xforce.ibmcloud.com/vulnerabilities/13513 https://exchange.xforce.ibmcloud.com/vulnerabilities/29396