PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote attackers to execute arbitrary PHP code via the path parameter.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2158
http://www.vupen.com/english/advisories/2005/0954