Description
BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 17 Nov 2021.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.