CVE-2022-3792

9.8 CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operatin...

Published: 2023-01-10 · Last updated: 2026-05-20

Severity and scoring

CVSS: 9.8 CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-89

Affected products

Vendor	Product
gullseye	gullseye_terminal_operating_system

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2022-3792
[Exploit reference]https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/
[Exploit reference]https://omrylmz.com/cve-2022-3792-terminal-operation-system/
[Other]https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747-2
[Exploit reference]https://www.usom.gov.tr/bildirim/tr-22-0747-2
[Exploit reference]https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/
[Exploit reference]https://omrylmz.com/cve-2022-3792-terminal-operation-system/
[Exploit reference]https://www.usom.gov.tr/bildirim/tr-22-0747-2

Related CVEs

Same CWE

CVE-2026-12206 — A vulnerability was identified in Grit42 Grit up to 0.11.0 (6.3 MEDIUM)
CVE-2026-12188 — A vulnerability was detected in Grit42 Grit up to 0.11.0 (6.3 MEDIUM)
CVE-2026-12175 — A vulnerability was detected in CodeAstro Student Attendance Management System 1.0 (4.7 MEDIUM)
CVE-2026-6428 — SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 2... (7.6 HIGH)
CVE-2026-9848 — The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and i... (7.5 HIGH)