A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/update_profile_Server endpoint .
References
| Link | Resource |
|---|---|
| http://mjobtime.com | Product |
| https://labs.infoguard.ch/advisories/cve-2025-51682_cve-2025-51683_time_management_softare_sqli-rce/ | Exploit Third Party Advisory |
Configurations
History
04 Dec 2025, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mjobtime
Mjobtime mjobtime |
|
| References | () http://mjobtime.com - Product | |
| References | () https://labs.infoguard.ch/advisories/cve-2025-51682_cve-2025-51683_time_management_softare_sqli-rce/ - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:mjobtime:mjobtime:15.7.2:*:*:*:*:*:*:* |
03 Dec 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-89 |
01 Dec 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-01 20:15
Updated : 2025-12-04 18:16
NVD link : CVE-2025-51683
Mitre link : CVE-2025-51683
CVE.ORG link : CVE-2025-51683
JSON object : View
Products Affected
mjobtime
- mjobtime
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')