SQL injection vulnerability in graphview.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the hostgroup_data parameter.
{ "urgency": "not yet assigned" }