CVE-2021-42258—BQE BillQuick Web Suite SQL Injection Vulnerability

漏洞名称

BQE BillQuick Web Suite SQL Injection Vulnerability

描述

BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2021-42258

相关 CWE

• CWE-89