Multiple security vulnerabilities such as cross site scripting and SQL injection have been discovered in Cacti versions below 0.8.7b and 0.8.6k.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/63541/cacti-multi.txt
Source: https://packetstormsecurity.com/files/63541/cacti-multi.txt.html