CVE-2022-3792

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

14.19% chance of exploitation in the next 30 days, 96th percentile

Published

2023-01-10

Updated

2026-05-20

Proof-of-concept exploits (2)

• https://omrylmz.com/cve-2022-3792-terminal-operation-system/
• https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/

References

• CVE Record
• NVD entry

Related

• CVE-2022-3786
• CVE-2022-37932
• CVE-2022-3785
• CVE-2022-37969
• CVE-2022-3784
• CVE-2022-37971