Launchpad.net

CVE 2010-1431

SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter.

See the CVE page on Mitre.org for more details.