Approved changes feed: RSS · Atom

cpe:2.3:a:cemtan:sar2html:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCemtan (a8731353-d5f3-5688-925b-c92a74854dc2)
ProductSar2Html (e0386f85-20ad-55e3-bd10-2a14ed95a84a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-110670 vulnerable 2026-11-03 10:16:00.942599 cemtan sar2html Archive Processing sar2html.py updateDb sql injection
HIGH (7.3)
A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-14T20:15:15.237Z
Updated: 2026-10-15T15:05:11.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110668 vulnerable 2026-11-03 10:16:00.916530 cemtan sar2html sar2html.py index sql injection
HIGH (7.3)
A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2html.py. This manipulation of the argument sort causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-14T19:30:14.467Z
Updated: 2026-10-20T02:04:08.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-18719 vulnerable 2026-09-16 04:34:01.933884 cemtan sar2html Search sar2html.py sql injection
MEDIUM (6.3)
A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Search results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-04T01:15:09.888Z
Updated: 2026-08-05T14:37:34.204Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.