A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/update_profile_Server endpoint .
| Software | From | Fixed in |
|---|---|---|
| mjobtime / mjobtime | 15.7.2 | 15.7.2.x |