Construction Firms Targeted via mJobTime Vulnerability Using MSSQL & IIS Exploits

Construction Firms Targeted via mJobTime Vulnerability Using MSSQL & IIS Exploits

First seen 26 Jan 2026, 18:54 UTC •CybersecuritynewsGbhackers •82% similarity •35.7

Article Content

Browse articles
ThreatCluster

Construction companies are facing active attacks that exploit a critical SQL injection vulnerability in the Mjobtime application, a widely used labor time-tracking tool. The attacks utilize MSSQL and IIS POST request methods, targeting Mjobtime version 15.7.2. This vulnerability poses significant risks to the affected firms operating in the construction sector.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Microsoft IIS Construction Sql Injection