BillQuick Web Suite · Sandworm Watch

Nov 3, 2021high

CVE-2021-42258: BQE BillQuick Web Suite SQL Injection Vulnerability

BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution. Required action: Apply updates per vendor instructions.

CVE-2021-42258EPSS 73.3%BQEBillQuick Web Suite

CISA KEV ↗ · unattributed attribution