ORing IAP-420 version 2.01e suffers from remote command injection and persistent cross site scripting vulnerabilities. Continue reading...