24 matches found
-CVE-2021-26904
CVE-2021-26904 LMA ISIDA Retriever 5.2 allows SQL Injection Suggested description : "ISIDA RETRIEVER v5.2" SQL Injection Vulnerable functionality : ISIDA RETRIEVER Platform is vulnerable to SQL Injection Vulnerable URL and paramert : website.com/index.php?title=Injection Vulnerable URL and parame...
EUVD-2021-13688
Malware in sbrugna...
EUVD-2021-13687
Malware in sbrugna...
CVE-2021-26903
LMA ISIDA Retriever 5.2 is vulnerable to XSS via query'text'...
CVE-2021-26904
LMA ISIDA Retriever 5.2 allows SQL Injection...
The vulnerability of the IS_CONTAINED_BY_LMA macro in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to trigger a service failure.
The vulnerability of the ISCONTAINEDBYLMA macro in the bfd/elf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...
SUSE CVE-2018-19932
An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the ISCONTAINEDBYLMA macro in elf.c...
LMA ISIDA Retriever Cross-Site Scripting Vulnerability
LMA-ISIDA Retriever is an application of the Russian company LMA-ISIDA. It provides management and information support on enterprise, regional scale. A cross-site scripting vulnerability exists in LMA ISIDA Retriever version 5.2, which stems from the lack of proper validation of client data for...
CVE-2021-26904
LMA ISIDA Retriever 5.2 allows SQL Injection...
CVE-2021-26904
LMA ISIDA Retriever 5.2 allows SQL Injection...
CVE-2021-26903
LMA ISIDA Retriever 5.2 is vulnerable to XSS via query'text'...
CVE-2021-26903
LMA ISIDA Retriever 5.2 is vulnerable to XSS via query'text'...
CVE-2021-26903
The CVE-2021-26903 entry concerns LMA ISIDA Retriever 5.2, where a cross-site scripting (XSS) flaw exists in the handling of querytext parameters due to inadequate validation. The CNVD entry explicitly states the vulnerability stems from lack of proper validation of client data for querytext para...
CVE-2021-26904
LMA ISIDA Retriever 5.2 allows SQL Injection...
CVE-2021-26904
CVE-2021-26904 affects LMA ISIDA Retriever 5.2 and is described as a SQL Injection vulnerability. The connected documents corroborate this vulnerability entry. According to NVD, the CVSS metrics show a high to critical impact: CVSS v3.1 base score 9.8 (CRITICAL) with vector CVSS:3.1/AV:N/AC:L/PR:...
CVE-2021-26903: Improper Neutralization of Input During Web Page Generation
LMA ISIDA Retriever 5.2 is vulnerable to XSS via query'text'...
CVE-2021-26904: Improper Neutralization of Special Elements used in an SQL Command
LMA ISIDA Retriever 5.2 allows SQL Injection...
PT-2021-17163
Name of the Vulnerable Software and Affected Versions: LMA ISIDA Retriever version 5.2 Description: The issue allows SQL Injection. Recommendations: For LMA ISIDA Retriever version 5.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2021-17162
Name of the Vulnerable Software and Affected Versions: LMA ISIDA Retriever version 5.2 Description: The issue is related to a XSS vulnerability via the query'text' variable. There is no information provided about the estimated number of potentially affected devices worldwide or real-world inciden...
LMA-ISIDA Retriever SQL Injection Vulnerability
LMA-ISIDA Retriever is an application of the Russian company LMA-ISIDA. It provides management and information support on enterprise, regional scale. A security vulnerability exists in LMA ISIDA Retriever 5.2, which arises from a lack of proper validation of user-entered data by a network system ...