CVE-2022-36276: Tcman Gim

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The exploitation of this vulnerability might allow a remote attacker to directly interact with the database.

Affected products

• Tcman Gim: version 8.0.1 only

Published 2023-10-04. Last modified 2026-06-17.