CVE-2007-6035

EPSS 4.5%

cacti - SQL injection

Published: 11/20/2007Modified: 5/27/2026

Description

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

Affected packages (2)

Debian/cactifrom 0, < 0.8.7a-1
Debian/cactifrom 0, < 0.8.6c-7sarge5

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2007-6035