EUVD-2013-1472

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-1434

Cacti prior to version 0.8.8b contains multiple SQL injection vulnerabilities in api_poller.php and utility.php that allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Public advisories (openSUSE/SUSe, Gentoo GLSA, Amazon Linux ALAS) indicate upgrading to 0.8.8b fix...