Mandriva Linux Security Advisory 2010-092 - SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter. Additionally cacti has been upgraded to 0.8.7e for Corporate Server 4. The updated packages have been patched to correct this issue.
903d2242306e3fcc193b0e0611311173ff9c27b1c6764c9cad6cea5d2d29552e