Security Issue with Advanced Poll

Just saw this come throught tonight about a security issue with Advanced Poll. Here is the link:

http://www.securityfocus.com/bid/8890/info/

Any word on a fix?

But what does it actually do?

It doesn't say it does anything bad, but obviously it may do.

Okay read a bit more this time... (under discussion link from link above)

Several problems exist in Advanced Poll when handling input from remote users. Because of this, an attacker may be able to gain sensitive information, include php files, or execute PHP code.

All I can say to this is use .htaccess files these folders; include, polldata, lang and admin. That should stop anyone being able to access the files directly on your server. I THINK, THIS MAY NOT WORK BUT IT MIGHT!

Auron