← Vulnerability feed

Vulnerability record · CVE-2007-3112 · published 7 June 2007

CVE-2007-3112: The cacti group cacti vulnerability

TThe Cacti Group · Cacti

graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.

7.8 CVSS 2.0 High EPSS 2.4% · top 16.6%
7.8CVSS 2.0 base score
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
22References
16 Jun 2026Last modified by NVD

Description

graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0074.html
http://bugs.cacti.net/view.php?id=955
http://fedoranews.org/updates/FEDORA-2007-219.shtml
http://mdessus.free.fr/?p=15
http://osvdb.org/37019
http://secunia.com/advisories/25557 PatchVendor Advisory
http://secunia.com/advisories/26872
http://svn.cacti.net/cgi-bin/viewcvs.cgi/branches/BRANCH_0_8_6/cacti/graph_image.php?rev=3956&r1=3898&r2=3956 Patch
http://www.mandriva.com/security/advisories?name=MDKSA-2007:184
https://bugzilla.redhat.com/show_bug.cgi?id=243592
https://exchange.xforce.ibmcloud.com/vulnerabilities/34747
http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0074.html
http://bugs.cacti.net/view.php?id=955
http://fedoranews.org/updates/FEDORA-2007-219.shtml
http://mdessus.free.fr/?p=15
http://osvdb.org/37019
http://secunia.com/advisories/25557 PatchVendor Advisory
http://secunia.com/advisories/26872
http://svn.cacti.net/cgi-bin/viewcvs.cgi/branches/BRANCH_0_8_6/cacti/graph_image.php?rev=3956&r1=3898&r2=3956 Patch
http://www.mandriva.com/security/advisories?name=MDKSA-2007:184
https://bugzilla.redhat.com/show_bug.cgi?id=243592
https://exchange.xforce.ibmcloud.com/vulnerabilities/34747

Track CVE-2007-3112 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-2149The cacti group cacti vulnerabilityconfig.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges …EPSS 2.3%10.0CVE-2002-1478The cacti group cacti vulnerabilityCacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.EPSS 2.5%7.5CVE-2006-6799The cacti group cacti vulnerabilitySQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL command…EPSS 2.6%7.5CVE-2006-0146John lim adodb sql injection vulnerabilityThe server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) …EPSS 13%7.5CVE-2006-0147John lim adodb vulnerabilityDynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis…EPSS 13%7.5CVE-2005-2148The cacti group cacti vulnerabilityCacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitra…EPSS 3.4%7.5CVE-2005-1525The cacti group cacti vulnerabilitySQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id param…EPSS 1.9%7.5CVE-2005-1526The cacti group cacti vulnerabilityPHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the c…EPSS 17%

Source: NIST National Vulnerability Database (record CVE-2007-3112), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.