Multiple SQL injection vulnerabilities were discovered in cacti, a web
interface for graphing of monitoring systems.