Debian: New cacti packages fix multiple vulnerabilities

LinuxSecurity.com: It was discovered that Cacti, a systems and services monitoring frontend, performed insufficient input sanitising, leading to cross site scripting and SQL injection being possible.

More...