CVE-2022-3792 CRITICAL

CVE-2022-3792: SQL Injection in GullsEye Terminal Operating System

Vendor Gullseye

Product GullsEye terminal operating system

Weakness CWE-89 · SQLi

Published January 10, 2023

Last update May 20, 2026

View on NVD All CVEs

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

Key dates

02Disclosure timeline

January 10, 2023 CVE published

May 20, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3792 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2024-13148 SQLi in Yukseloglu Filter's B2B Login Platform CVE-2025-32120 WordPress Easy Query – WP Query Builder plugin <= 2.0.4 - SQL Injection Vulnerability CVE-2023-41685 WordPress Woocommerce Support System Plugin <= 1.2.1 is vulnerable to SQL Injection CVE-2024-0502 SourceCodester House Rental Management System Edit User manage_user.php sql injection CVE-2025-68053 WordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerability