ID: CVE-2024-24256
Published: 2024-02-15T08:15Z
Description: description_data: SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hr_position directory.