Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
BillQuick Web Suite SQL injection (CVE-2021-42258) - Vulnerability Database

BillQuick Web Suite SQL injection (CVE-2021-42258)

Description

Invicti detected BillQuick Web Suite. This version has several SQL injection vulnerabilities. Successful attacks of these vulnerabilities can result in takeover of the server.

Remediation

Upgrade to the latest version of BillQuick Web Suite

References

Hackers Are Exploiting a Vulnerability in Popular Billing Software to Deploy Ransomware

Related Vulnerabilities

Hibernate Query Language (HQL) Injection High
Common tags: SQL Injection
WordPress Plugin Abandoned Cart Lite for WooCommerce SQL Injection (5.8.1) High
Common tags: SQL Injection
WordPress Plugin Comments-wpDiscuz SQL Injection (5.3.5) High
Common tags: SQL Injection
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder SQL Injection (1.13.35) High
Common tags: SQL Injection
WordPress Plugin Payment Form for PayPal Pro SQL Injection (1.1.64) High
Common tags: SQL Injection

Severity

High

Classification

CVE-2021-42258
CWE-89
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A

Tags

SQL Injection