← Back

Bqe

bqe

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Billquick Web Suite
billquick_web_suite
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-42258
1Bqe
1Billquick Web Suite
Jun 17, 2026
Oct 22, 2021
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for examp...Show more
BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID (aka username) parameter. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xp_cmdshell.Show less