← back
CVE-2022-3792

SQL Injection in GullsEye Terminal Operating System

CVSS 9.8 CRITICALEPSS 14.2%CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
GullsEye · GullsEye terminal operating system
public PoCs found — 2
cve_referencefordefence.com/cve-2022-3792-gullseye-terminal-operation-system/unverifiedcve_referenceomrylmz.com/cve-2022-3792-terminal-operation-system/unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/https://omrylmz.com/cve-2022-3792-terminal-operation-system/https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747-2https://www.usom.gov.tr/bildirim/tr-22-0747-2