BQE BillQuick Web Suite SQL Injection Vulnerability
BQE · BillQuick Web Suite
Date added (CISA)
2021-11-03
Remediation due
2021-11-17
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.