Security Cacti 0.8.8f graphs_new.php SQL Injection January 9, 2016 007admin Leave a comment Cacti versions 0.8.8f and below suffer from a remote SQL injection vulnerability in graphs_new.php.