- Vendor / Project
- BQE
- Product
- BillQuick Web Suite
- Date added
- Nov 3, 2021
- Due date
- Nov 17, 2021
- Known ransomware use
- Known
- CWEs
- CWE-89
Description
BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.
Required action
Apply updates per vendor instructions.