sar2html OS Command Injection
97Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 10epss 60%
from disclosure to weapon67 days
Published on NVDJun 20
1st PoC+67d
VulnCheckJun 20
exploitation probability
60%top 1% of all CVEs
observed exploitation
yesVulnCheck
3 public exploit(s)
An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject shell commands by appending them to the plot parameter (e.g., ?plot=;id) in a crafted GET request. The output of the command is displayed in the application's interface after interacting with the host selection UI. Successful exploitation leads to arbitrary command execution on the underlying system. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
sar2html · sar2htmlpublic PoCs found — 3
githubgithub.com/HackerTyperAbuser/CVE-2025-34030-PoC★ 0cve_referencewww.exploit-db.com/exploits/47204unverifiedvulncheckvulncheck.com/xdb/ed6a27358184unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.