Security Advisory
CVE-2024-24256
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hr_position directory.