Security Advisory
CVE-2011-4824
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter.