CVE-2022-3792

Опубликовано: 10 янв. 2023

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.

This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

Ссылки

https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/
Exploit
Third Party Advisory
https://omrylmz.com/cve-2022-3792-terminal-operation-system/
Exploit
Third Party Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747-2
https://www.usom.gov.tr/bildirim/tr-22-0747-2
Exploit
Third Party Advisory
https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/
Exploit
Third Party Advisory
https://omrylmz.com/cve-2022-3792-terminal-operation-system/
Exploit
Third Party Advisory
https://www.usom.gov.tr/bildirim/tr-22-0747-2
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gullseye:gullseye_terminal_operating_system:*:*:*:*:*:*:*:*

Версия до 5.0.13 (исключая)

EPSS

Процентиль: 96%

0.14187

Средний

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-xghr-p26r-9675