Important Security Fixes for Cacti Multiple security vulnerabilities have been discovered in Cacti's web interface: * XSS vulnerabilities * Path disclosure vulnerabilities * SQL injection vulnerabilities * HTTP response splitting vulnerabilities All the above issues have been addressed in a new release of Cacti: * 0.8.7b - http://www.cacti.net/downloads/cacti-0.8.7b.tar.gz * 0.8.6k - http://www.cacti.net/downloads/cacti-0.8.6k.tar.gz Patches for the following versions are available at: * 0.8.7a - http://www.cacti.net/download_patches.php?version=0.8.7a * 0.8.6j - http://www.cacti.net/download_patches.php?version=0.8.6j