The vulnerability of the “links” function in the Cacti network monitoring software allows a hacker to execute arbitrary SQL queries.

The vulnerability of the “links” function in the Cacti network monitoring software is related to the lack of validation for the sequences of XML objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...