Cacti versions 0.8.8f and below suffer from a remote SQL injection vulnerability in graphs_new.php. Continue reading...