CVE-2021-42258 BQE BillQuick Web Suite
BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.
- CVSS
- not scored
On CISA’s exploited list
BQE BillQuick Web Suite SQL Injection Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2021-11-17
- Ransomware use
- known