CVE-2008-0784: Cacti

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors.

Affected products

• Cacti Cacti: version 0.6.7 only; version 0.8 only; version 0.8.1 only; version 0.8.2 only; version 0.8.2a only; version 0.8.3 only; …

Published 2008-02-14. Last modified 2026-06-16.