CVE-2025-51683

A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/update_profile_Server endpoint .

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.44% chance of exploitation in the next 30 days, 37th percentile

Nuclei

critical · CWE-89

Published

2025-12-01

Updated

2026-07-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51683.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2025-5168
• CVE-2025-5169
• CVE-2025-5167
• CVE-2025-5170
• CVE-2025-5166
• CVE-2025-5171