google dork: inurl:x-poll
and add to /admin/images/add.php , upload to shell, and mass deface is server
www.ayyildiz.org