CVE-2025-51683: Mjobtime

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/update_profile_Server endpoint .

Affected products

• Mjobtime Mjobtime: version 15.7.2 only

Published 2025-12-01. Last modified 2026-07-05.