CVE-2024-24256

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hrposition directory...

CVE-2024-24256

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hrposition directory...

CVE-2024-24256

The Yonyou space-time enterprise information integration platform (v.9.0 and earlier) is vulnerable to a SQL Injection flaw. An attacker can exploit the gwbhAIM parameter in the saveMove.jsp file within the hr_position directory to obtain sensitive information. As a remediation, it is recommended...