CVE-2025-51683

The mJobtime time tracking and job management software (version v15.7.2 ) is vulnerable to a blind SQL Injection (SQLi) . An unauthenticated attacker can execute arbitrary SQL statements by sending a crafted POST request to the /Default.aspx/update_profile_Server endpoint. This vulnerability requ...

CVE-2025-51682

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly...

CVE-2025-51682: Client-Side Enforcement of Server-Side Security

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly...

CVE-2025-51682

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly...

CVE-2025-51682

The mJobtime time tracking and job management software (version 15.7.2 ) contains a vulnerability where it handles authorization on the client side . This flaw allows an attacker to modify the client-side code to gain access to administrative features and craft requests to call these functions di...

PT-2025-48031

Name of the Vulnerable Software and Affected Versions mJobtime version 15.7.2 Description The software handles authorization on the client side, allowing an attacker to modify the client-side code and gain access to administrative features. Attackers can craft requests based on the modified...

PT-2025-48032

Name of the Vulnerable Software and Affected Versions mJobtime version 15.7.2 Description A blind SQL Injection SQLi issue exists in mJobtime version 15.7.2. An unauthenticated attacker can execute arbitrary SQL statements by sending a specially crafted POST request to the /Default.aspx/update...