Cacti versions 0.8.6e and below suffer from multiple SQL injection vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38483/cactiSQL086e-sql.txt
Source: https://packetstormsecurity.com/files/38483/cactiSQL086e-sql.txt.html