Rating:

Django Template Injection

Use templates to write your own crude implementation of the admin log.

Use that to discover that there are 3 polls insted of 2.

Going to that poll gives you an exception with a code traceback, giving you a hint as to some templates you can use to get the flag.

More detailed, original write-up ( https://github.com/ibnzterrell/ctf-write-ups/blob/master/CSAW_Quals_2017/ShiaLabeouf.md )