Lucene search
+L

5 matches found

EUVD
EUVD
•added 2026/08/04 1:15 a.m.•17 views

EUVD-2026-52554

A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Search results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

6.5CVSS5.4AI score0.00316EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/04 1:15 a.m.•10 views

CVE-2026-18719 cemtan sar2html Search sar2html.py sql injection

A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Search results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/04 1:15 a.m.•59 views

CVE-2026-18719

CVE-2026-18719 affects cemtan sar2html 4.0.0, specifically an issue in the Search component’s sar2html.py that enables SQL injection via manipulation of the Search argument. The vulnerability may be exploitable remotely; public exploit activity is noted. The entry notes that the vendor was contac...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•35 views

PT-2026-67629

Name of the Vulnerable Software and Affected Versions cemtan sar2html version 4.0.0 Description A SQL injection issue exists within the Search component in the sar2html.py file. This flaw allows a remote attacker to execute unauthorized database queries by manipulating the Search argument. SQL...

6.5CVSS6.9AI score0.00316EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/04 12:00 a.m.•1 views

CVE-2026-18719: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Search results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References3
Rows per page
Query Builder