CVE-2004-1737

SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.

Date published : 2005-02-26

http://www.securityfocus.com/bid/10960

http://marc.info/?l=bugtraq&m=109272483621038&w=2