Cpe:2.3:a:cemtan:sar2html:4.0.0:*:*:*:*:*:*:*

The sar2html 4.0.0 application is vulnerable to remote SQL injection via the 'sort' parameter in sar2html.py, enabling unauthenticated attackers to execute arbitrary database queries.