Sar2html vulnerabilities
We track 1 vulnerability in Sar2html products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2025.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest Sar2html vulnerabilities
- 10.0 Critical severity
sar2html: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject