Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php...
9.8CVSS7.4AI score0.0109EPSS
SaveExploits1References2
OSV•added 2020/02/17 4:15 a.m.•7 views
CVE-2020-9025
Iteris Vantage Velocity Field Unit 2.4.2 devices have multiple stored XSS issues in all parameters of the Start Data Viewer feature of the /cgi-bin/loaddata.py script...