Sql injection

BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID aka username parameter. Successful exploitation can include...

BEQ BillQuick Web Suite SQL注入漏洞

BEQ BillQuick Web Suite is a time and billing system from BEQ USA. BQE BillQuick Web Suite suffers from a SQL injection vulnerability that stems from BQE BillQuick Web Suite 2018 through 2021 allows SQL injection to be used for unauthenticated remote code execution, such as that exploited in the...

PT-2021-4673

Name of the Vulnerable Software and Affected Versions BQE BillQuick Web Suite versions 2018 through 2021 before 22.0.9.1 Description The issue allows SQL injection for unauthenticated remote code execution, which has been exploited in the wild in October 2021 for ransomware installation. SQL...