CVE:CVE-2008-7046
CNNVD:CNNVD-200908-359
AJ Square Free Polling Script(AJPoll)允许远程攻击者借助一个对admin/include/newpoll.php的直接请求，来绕过身份认证和创建新poll。此漏洞不同于CVE-2008-7045。
solution:Upgrade ajsquare free_polling_script to a higher version than *