SUSE CVE-2007-3113

Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service CPU consumption via a large value of the 1 graphheight or 2 graphwidth parameter, different vectors than CVE-2007-3112...

PT-2014-4875

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.7g, 0.8.8b, and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters in the graph xport.php file, including graph start, graph end, graph height...