Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:mjobtime:mjobtime:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Unauthenticated SQL Injection and RCE in mJobTime

mJobTime builds through 15.7.3.32 contain an unauthenticated SQL injection vulnerability in Login.aspx allowing attackers to execute arbitrary commands as LocalSystem via xp_cmdshell.

mJobTime injection rce authentication-bypass
1r 3t 1c