CVE-2014-5261

The graph settings script graphsettings.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php...

CVE-2014-5262

SQL injection vulnerability in the graph settings script graphsettings.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-6376

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.8b and earlier Description A SQL injection issue in the graph settings script allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 0.8.8b and earlier, update to a version later than 0.8.8b ...