CVE-2021-26903

LMA ISIDA Retriever 5.2 is vulnerable to XSS via query'text'...

CVE-2021-26903

The CVE-2021-26903 entry concerns LMA ISIDA Retriever 5.2, where a cross-site scripting (XSS) flaw exists in the handling of querytext parameters due to inadequate validation. The CNVD entry explicitly states the vulnerability stems from lack of proper validation of client data for querytext para...

CVE-2021-26904

LMA ISIDA Retriever 5.2 allows SQL Injection...

CVE-2021-26904

CVE-2021-26904 affects LMA ISIDA Retriever 5.2 and is described as a SQL Injection vulnerability. The connected documents corroborate this vulnerability entry. According to NVD, the CVSS metrics show a high to critical impact: CVSS v3.1 base score 9.8 (CRITICAL) with vector CVSS:3.1/AV:N/AC:L/PR:...

LMA-ISIDA Retriever SQL Injection Vulnerability

LMA-ISIDA Retriever is an application of the Russian company LMA-ISIDA. It provides management and information support on enterprise, regional scale. A security vulnerability exists in LMA ISIDA Retriever 5.2, which arises from a lack of proper validation of user-entered data by a network system ...

LMA ISIDA Retriever 跨站脚本漏洞

LMA-ISIDA Retriever is an application of the Russian company LMA-ISIDA. It provides management and information support on enterprise, regional scale. A cross-site scripting vulnerability exists in LMA ISIDA Retriever version 5.2, which stems from the lack of proper validation of client data for...