Gentoo Linux Security Advisory GLSA 200712-02:02 - It has been reported that the local_graph_id variable used in the file graph.php is not properly sanitized before being processed in an SQL statement. Versions less than 0.8.7a are affected.
da4a4b89600f7f51dc73aa6b1ce47f4768e8e260621ae035de1d06f41a1443af
Debian Security Advisory 1418-1 - It was discovered that Cacti, a tool to monitor systems and networks, performs insufficient input sanitizing, which allows SQL injection.
20a3e678e94d4ee03206ef9391bc8c40e0ddf294da85e85b550cd6517650812f
Mandriva Linux Security Advisory - An SQL injection vulnerability in cacti may allow remote attackers to execute arbitrary SQL commands.
9bde6add7adf0a28b28e19db48271f642d5c4eaab4d40dd1b93d2eb3d13c0a12