cve/2024/CVE-2024-24256.md
2024-06-09 00:33:16 +00:00

771 B

CVE-2024-24256

Description

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hr_position directory.

POC

Reference

Github

No PoCs found on GitHub currently.