CVE-2022-3792 - SQL Injection in GullsEye Terminal Operating System

Back Back to CVE browser

CRITICAL

SQL Injection in GullsEye Terminal Operating System

Published Jan 10, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 14.19%

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.

This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

Affected products

Vendor GullsEye Product GullsEye terminal operating system Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <5.0.13

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GullsEye

GullsEye terminal operating system

unaffected

Version	Status	Constraints
0	affected	<5.0.13

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43138
Advisory
https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/
exploitThird Party Advisory
https://omrylmz.com/cve-2022-3792-terminal-operation-system/
exploitThird Party Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747-2
government-resource
https://www.usom.gov.tr/bildirim/tr-22-0747-2
government-resourcebroken-linkExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43138		Advisory
https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/		exploitThird Party Advisory
https://omrylmz.com/cve-2022-3792-terminal-operation-system/		exploitThird Party Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747-2		government-resource
https://www.usom.gov.tr/bildirim/tr-22-0747-2		government-resourcebroken-linkExploitThird Party Advisory