CVE-2021-42258 — BQE BillQuick Web Suite SQL Injection Vulnerability

CISA KEVExploited: confirmedBQE

BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.

Vulnerability details

Affected productsBillQuick Web Suite
KEV remediation due2021-11-17