CVE-2023-6655

A critical SQL injection vulnerability exists in the Login Interface of Hongjing e-HR 2020 . The flaw is located in the functionality associated with the file /w_selfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree. Attackers can exploit this by manipulating the parentid argum...