CVE		CVE-2008-0784
Status		Candidate
Description		graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors.
Phase		Assigned (14.02.2008)
SecurityVulns:		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0784
References		BID : 27749
		BUGTRAQ : 20080212 cacti -- Multiple security vulnerabilities have been discovered
		BUGTRAQ : 20080212 Cacti 0.8.7a Multiple Vulnerabilities
		CONFIRM : http://www.cacti.net/release_notes_0_8_7b.php
		FRSIRT : ADV-2008-0540
		SECTRACK : 1019414
		SECUNIA : 28872