SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via the pollid parameter.Referenceshttp://www.securityfocus.com/bid/15508http://www.osvdb.org/21035