{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-42258/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-42258/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-42258/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-42258/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-42258/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-42258"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-42258"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2021/CVE-2021-42258.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2021-42258\n\ninfo:\n  name: BillQuick Web Suite SQL Injection\n  author: dwisiswant0\n  severity: critical\n  description: BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xp_cmdshell.\n  impact: |\n    Successful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the entire system.\n  remediation: |\n    Apply the latest security patches and updates provided by the vendor to fix the SQL Injection vulnerability in the BillQuick Web Suite.\n  reference:\n    - https://www.huntress.com/blog/threat-advisory-hackers-are-exploiting-a-vulnerability-in-popular-billing-software-to-deploy-ransomware\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-42258\n    - https://github.com/ARPSyndicate/kenzer-templates\n    - https://github.com/Ostorlab/KEV\n    - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2021-42258\n    cwe-id: CWE-89\n    epss-score: 0.74426\n    epss-percentile: 0.9947\n    cpe: cpe:2.3:a:bqe:billquick_web_suite:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: bqe\n    product: billquick_web_suite\n  tags: cve2021,cve,sqli,billquick,kev,bqe,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET / HTTP/1.1\n        Host: {{Hostname}}\n      - |\n        POST / HTTP/1.1\n        Host: {{Hostname}}\n        Referer: {{BaseURL}}\n        Origin: {{RootURL}}\n        Content-Type: application/x-www-form-urlencoded\n\n        __EVENTTARGET=cmdOK&__EVENTARGUMENT=&__VIEWSTATE={{url_encode(\"{{VS}}\")}}&__VIEWSTATEGENERATOR={{url_encode(\"{{VSG}}\")}}&__EVENTVALIDATION={{url_encode(\"{{EV}}\")}}&txtID=uname%27&txtPW=passwd&hdnClientDPI=96\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"System.Data.SqlClient.SqlException\"\n          - \"Incorrect syntax near\"\n          - \"_ACCOUNTLOCKED\"\n        condition: and\n\n    extractors:\n      - type: xpath\n        name: VS\n        internal: true\n        xpath:\n          - \"/html/body/form/div/input[@id='__VIEWSTATE']\"\n        attribute: value\n\n      - type: xpath\n        name: VSG\n        internal: true\n        xpath:\n          - \"/html/body/form/div/input[@id='__VIEWSTATEGENERATOR']\"\n        attribute: value\n\n      - type: xpath\n        name: EV\n        internal: true\n        xpath:\n          - \"/html/body/form/div/input[@id='__EVENTVALIDATION']\"\n        attribute: value\n# digest: 4b0a00483046022100f4bce57265002f054e9f6448f01b700930a386782dd9681f1292754444e2d2f2022100d15efc37b401be21d40094b6aed43a13209d929c10b109977943a75628e6fc9d:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2021-42258"
}