Home

Description

A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/update_profile_Server endpoint .

PUBLISHED Reserved 2025-06-16 | Published 2025-12-01 | Updated 2025-12-03 | Assigner mitre

References

mjobtime.com

labs.infoguard.ch/...51683_time_management_softare_sqli-rce/

cve.org (CVE-2025-51683)

nvd.nist.gov (CVE-2025-51683)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.