Debian Linux Security Advisory 2384-2 - It was discovered that the last security update for cacti, DSA-2384-1, introduced a regression in lenny.
82d990a810faa7b35f7eb3aceea45e1088a0b71504914f64a2c3c9da89629f41
Mandriva Linux Security Advisory 2012-010 - SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter. Various vulnerabilities were discovered and fixed in the 0.8.7i version. The updated packages provide the latest 0.8.7i version which is not affected by these issues.
ca005370434a3ce2a2f63974ceafe2b1f737775c275eb674e89cd20ea2c2c927
Debian Linux Security Advisory 2384-1 - Several vulnerabilities have been discovered in cacti, a graphing tool for monitoring data. Multiple cross site scripting issues allow remote attackers to inject arbitrary web script or HTML. An SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands.
97112ae8aa4be514e6406bc346306ae8f043357bb2bc5dd99ba8f00aab17fbc8