CVE-2013-3738

CVE-2013-3738 is a critical vulnerability published on February 17, 2020. A File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request strings in CGI scripts, which could let a remote malicious user execute arbitrary code.

CVE-2013-3738 was first published in the National Vulnerability Database on February 17, 2020, with the most recent update on November 21, 2024. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.

CVE-2013-3738 has a CVSS v3 base score of 9.8 (NVD).

Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2013-3738, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.