CVE-2025-34030

Description

An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject shell commands by appending them to the plot parameter (e.g., ?plot=;id) in a crafted GET request. The output of the command is displayed in the application's interface after interacting with the host selection UI. Successful exploitation leads to arbitrary command execution on the underlying system.

Reserved 2025-04-15 | Published 2025-06-20 | Updated 2025-06-23 | Assigner VulnCheck

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-20 Improper Input Validation

Product status

Default status
unaffected

Any version
affected

Credits

Furkan Kayapinar finder

References

github.com/cemtan/sar2html product

www.exploit-db.com/exploits/47204 exploit

www.fortiguard.com/encyclopedia/ips/48624 third-party-advisory

vulncheck.com/advisories/sar2html-command-injection third-party-advisory

cve.org (CVE-2025-34030)

nvd.nist.gov (CVE-2025-34030)

Download JSON