PT-2026-68160

Name of the Vulnerable Software and Affected Versions Cacti affected versions not specified Description The sanitize sql column function in lib/functions.php fails to properly sanitize user-supplied ORDER BY column names. The function uses a regular expression that allows letters, digits,...