Attackers Targeting Construction Firms Exploiting Mjobtime App Vulnerability Using MSSQL and IIS POST Request

Cybersecuritynews •Tushar Subhra Dutta • January 26, 2026

Attackers are increasingly turning their attention to construction firms by abusing weaknesses in business software that runs on their job sites. One of the newest targets is the Mjobtime construction time-tracking application, which is often deployed on Microsoft IIS with an MSSQL database in the background. A blind SQL injection flaw in Mjobtime version 15.7.2, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Construction Firms Targeted via mJobTime Vulnerability Using MSSQL & IIS Exploits Construction companies are facing active attacks that exploit a critical SQL injection vulnerability in the Mjobtime application, a widely used labor time-tracking tool. The attacks utilize MSSQL and IIS POST request methods, targeting Mjobtime version 15.7.2. This vulnerability poses significant risks to the affected firms operating in the construction sector. 2 sources 36

Extracted Entities

Attackers Targeting Construction Firms Exploiting Mjobtime App Vulnerability Using MSSQL and IIS POST Request

The full story

Extracted Entities

Attack Types (1)

Industries (1)

Platforms (1)

Vulnerabilities (1)