CVE-2008-0785

The exploit demonstrates SQL injection and XSS vulnerabilities in Cacti 0.8.7a and prior versions. It includes a URL-based SQLi example and a cURL command to exploit the vulnerability via POST data.

This exploit demonstrates a SQL injection vulnerability in Cacti's graph_xport.php by injecting a single quote into the local_graph_id parameter. It requires a valid session cookie to exploit the vulnerability.

The provided text describes multiple vulnerabilities in Cacti 0.8.7a and prior, including SQL injection, XSS, and HTTP response splitting. It includes a sample SQL injection payload for demonstration but lacks executable exploit code.

This exploit demonstrates a blind SQL injection vulnerability in Cacti 0.8.7a and prior versions. It uses conditional queries to infer password characters by observing HTTP response status codes.