CVE-2007-3113: the_cacti_group cacti

EPSS trend

Probability

2.74%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.74% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

References

11 links

mdessus.free.fr?p=15X Refsource MISC
secunia.com/advisories/26872Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/show_bug.cgi?id=243592X Refsource MISC
www.mandriva.com/security/advisories?name=MDKSA-2007:184Vendor AdvisoryX Refsource MANDRIVA
bugs.cacti.net/view.php?id=955X Refsource CONFIRM
secunia.com/advisories/25557Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
svn.cacti.net/cgi-bin/…X Refsource CONFIRMPatch
fedoranews.org/updates/FEDORA-2007-219.shtmlVendor AdvisoryX Refsource FEDORA
exchange.xforce.ibmcloud.com/vulnerabilities/34747VDB EntryX Refsource XF
osvdb.org/37019VDB EntryX Refsource OSVDB

Show all 11 references

security-tracker.debian.org/tracker/CVE-2007-3113Advisory

Related vulnerabilities

RoutineCVE-2007-3112the_cacti_group · cacti +1 more19y agothe_cacti_group cactigraph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.CVSS7.8HighEPSS2.41%PrioritiseCVE-2006-6799the_cacti_group · cacti +1 more19y agothe_cacti_group cactiSQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) second or (2) third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are later used in the polling_items array and popen function.CVSS7.5HighEPSS2.59%PrioritiseCVE-2006-0147john_lim · adodb +6 more20y agojohn_lim adodbDynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.CVSS7.5HighEPSS13.06%PrioritiseCVE-2006-0146john_lim · adodb +6 more20y agojohn_lim adodbThe server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter.CVSS7.5HighEPSS13.24%RoutineCVE-2005-2149the_cacti_group · cacti +1 more21y agothe_cacti_group cacticonfig.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks.CVSS10.0CriticalEPSS2.31%RoutineCVE-2005-2148the_cacti_group · cacti +1 more21y agothe_cacti_group cactiCacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the get_request_var function to return the wrong value in the $_REQUEST variable, which is cleansed while the original malicious $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php.CVSS7.5HighEPSS3.40%

All vulnerabilities incacti

CVE-2007-3113: the_cacti_group cacti

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References