CVE Catalog

CVE-2022-3792

Critical
Published: Translated: NVD NIST

Summary

A SQL Injection vulnerability in the GullsEye terminal operating system due to improper neutralization of special elements used in SQL commands. This issue affects versions before 5.0.13.

Risk Assessment

An attacker could exploit this vulnerability to perform SQL Injection attacks, potentially leading to unauthorized access to database information.

Recommendation

It is recommended to update the GullsEye terminal operating system to version 5.0.13 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS