CVE-2008-0785

CVE-2008-0785 details multiple SQL injection vulnerabilities in Cacti versions 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k. These flaws allow remote authenticated users to execute arbitrary SQL commands through various parameters in graph_view.php, tree.php, graph_xport.php, and index.php/login. The vulnerability has a CVSS score of 7.5, indicating high severity with network-based attacks, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 89/100, highlighting its significant risk. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB for all identified injection points. Despite this, there is no evidence of active exploitation, and the vulnerability has received minimal community discussion or media coverage.