Medium · 5.9 CVE-2024-24256 EUVD-2024-21680GHSA-46w2-vp86-hhwc

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain …

Published Feb 15, 2024 · Updated Nov 25, 2024 · Assigned by mitre

Description

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hr_position directory.

References

https://github.com/l8l1/killl.github.io/blob/main/3.md