Sql injection

SQL injection vulnerability in mainbigware53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the pollid parameter in a results action to mainbigware53.php...