1.2.18
Fixes:
2020-35701 SQL Injection was possible due to incorrect validation order
2020-14424 Lack of escaping on file input fields can lead to XSS exposure under midwinter theme

Fixed merge issue in lib/clog_webapi.php found by Alexander Makeenkov.

Fixed issues in 1.2.15 release.

Updated to upstream version 1.2.15 (Fixes: CVE-2020-13230, CVE-2020-13231).

fix syntax error in include/global.php (thx to vercha@)

package cacti.sql to doc dir

1.2.10
Fixes:
2019-17357 When viewing graphs, some input variables are not properly checked (SQL injection possible)
2019-17358 When deserializating data, ensure basic sanitization has been performed
2019-16723 Security issue allows to view all graphs
2020-7106 Lack of escaping on some pages can lead to XSS exposure
2020-7237 Remote Code Execution due to input validation failure in Performance Boost Debug Log
2020-8813 When guest users have access to realtime graphs, remote code could be executed

1.2.3

1.2.2
drop php5 package, php7 package merge with main

1.2.0

1.0.3
add php7 subpackage

0.8.8h
fixed CVE-2014-2326,CVE-2014-2327,CVE-2014-2328,CVE-2014-5025,
2014-5026,CVE-2014-4002,CVE-2013-5588,CVE-2013-5589,
2015-4342,CVE-2015-4634,CVE-2015-8377,CVE-2015-8604,
2016-3659

fixed:
2014-2326 Unspecified HTML Injection Vulnerability
2014-2328 Unspecified Remote Command Execution Vulnerability
2014-2709 shell escaping issues in lib/rrd.php
2014-2708 SQL injection issues in graph_xport.php

0.8.8b

0.8.8a

0.8.8