Cybersecurity Alerts

BQE BillQuick Web Suite SQL Injection Vulnerability

BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-89

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-42258