Billquick Web Suite

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-42258 CRITICAL POC KEV THREAT Act Now

BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi RCE Billquick Web Suite

NVD

CVSS 3.1

9.8

EPSS

73.3%

CVE-2021-42258

EPSS 73% CVSS 9.8

CRITICAL POC KEV THREAT Act Now

BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi RCE Billquick Web Suite

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy