SQL injection vulnerability in graphview.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the hostgroup_data parameter.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-3659.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "0.8.8g" } ] } ]