CVE-2021-26904

🗓️ 26 Feb 2021 14:24:53Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 81 Views🌐 WEB

LMA ISIDA Retriever 5.2 SQL Injection CVE-2021-2690

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for SQL Injection in Isida Retriever	24 Feb 202112:42	–	githubexploit
attackerkb	CVE-2021-26904	26 Feb 202115:15	–	attackerkb
Circl	CVE-2021-26904	26 Feb 202118:39	–	circl
CNNVD	LMA-ISIDA Retriever SQL Injection Vulnerability	26 Feb 202100:00	–	cnnvd
Cvelist	CVE-2021-26904	26 Feb 202114:24	–	cvelist
EUVD	EUVD-2021-13688	7 Oct 202500:30	–	euvd
Kitploit	-CVE-2021-26904	12 Oct 202623:46	–	kitploit
NVD	CVE-2021-26904	26 Feb 202115:15	–	nvd
OSV	CVE-2021-26904	26 Feb 202115:15	–	osv
Prion	Sql injection	26 Feb 202115:15	–	prion

NVD

Node

isida retrieverMatch5.2

Source	Link
github	www.github.com/Security-AVS/-CVE-2021-26904
isida	www.isida.by/category/news/

Parameter	Position	Path	Description	CWE
title	query param	website.com/index.php?title=Injection	ISIDA Retriever 5.2 SQL Injection via title parameter on index.php	CWE-89
query	query param	website.com/index.php?title=Injection	ISIDA Retriever 5.2 SQL Injection via title parameter on index.php	CWE-89
title	nested	website.com/index.php?title=info?mode=info?query=Injection	ISIDA Retriever 5.2 SQL Injection via nested query in title value on index.php	CWE-89
query	nested	website.com/index.php?title=info?mode=info?query=Injection	ISIDA Retriever 5.2 SQL Injection via nested query in title value on index.php	CWE-89

17 Jun 2026 03:43Current

9.7Critical risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8

EPSS0.02028

lma isida retriever 5.2 sql injection cve-2021-26904 nvd