CVE-2025-15560

CVE-2025-15560 describes an authenticated SQL injection in the NesterSoft WorkTime server widget API endpoint. The vulnerability allows an attacker with minimal permissions to inject SQL queries. With a Firebird backend, the attacker can retrieve all data from the database. With an MSSQL backend,...