| Package | Affected versions | Patched versions |
|---|---|---|
| yonyou | ≤ 9.0 |
SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hr_position directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free