CVE-2007-6035

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

Date published : 2007-11-20

http://www.securityfocus.com/bid/26487

http://www.cacti.net/release_notes_0_8_7a.php