Mjobtime vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mjobtime products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-51683 Critical · 9.8 Public exploit CWE-89 Dec 1, 2025

SQL Injection in Mjobtime

A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/update_profile_Server endpoint .

CVE-2025-51682 Critical · 9.8 CWE-602 Dec 1, 2025

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to…

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly.