CVE-2022-2807 - SQL Injection in Prens Student Information System

Back Back to CVE browser

CRITICAL

SQL Injection in Prens Student Information System

Published Dec 12, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.64%

Description

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection.

This issue affects Prens Student Information System: before 2.1.11.

Affected products

Vendor Algan Software Product Prens Student Information System Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <2.1.11

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Algan Software

Prens Student Information System

unaffected

Version	Status	Constraints
0	affected	<2.1.11

Remediation

Vendor solution

Algan Software Prens Student Information System should be updated to >= 2.1.11.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0708
government-resource
https://www.usom.gov.tr/bildirim/tr-22-0708
government-resourcebroken-linkThird Party Advisory

Link	Providers	Tags
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0708		government-resource
https://www.usom.gov.tr/bildirim/tr-22-0708		government-resourcebroken-linkThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner TR-CERT

Published Dec 12, 2022

Updated May 20, 2026

Reserved Aug 12, 2022

Link CVE-2022-2807

CISA Vulnrichment

Updated Apr 22, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-2807

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-2807