Description

Acunetix detected BillQuick Web Suite. This version has several SQL injection vulnerabilities. Successful attacks of these vulnerabilities can result in takeover of the server.

Remediation

Upgrade to the latest version of BillQuick Web Suite

References

Hackers Are Exploiting a Vulnerability in Popular Billing Software to Deploy Ransomware

Related Vulnerabilities

WordPress Plugin Eventr SQL Injection (1.02.2)

WordPress Plugin Traffic Analyzer SQL Injection (3.4.2)

WordPress Plugin Tierra's Billboard Manager SQL Injection (1.14)

WordPress Plugin GamiPress-The most flexible and powerful gamification for WordPress SQL Injection (2.5.7)

WordPress Plugin WP Forum Server Multiple SQL Injection (1.6.5)

Severity

High

Classification

CVE-2021-42258 CWE-89 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A

Tags

SQL Injection