CVE-2022-2807 - OpenCVE

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection.This issue affects Prens Student Information System: before 2.1.11.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Algan	Prens Student Information System

Configuration 1 [-]

cpe:2.3:a:algan:prens_student_information_system:*:*:*:*:*:*:*:*

References

Link	Resource
https://www.usom.gov.tr/bildirim/tr-22-0708	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: TR-CERT

Published: 2022-11-25T00:00:00

Updated: 2023-09-03T15:44:38.319Z

Reserved: 2022-08-12T00:00:00

Link: CVE-2022-2807

JSON object: View

NVD Information

Status : Modified

Published: 2022-12-02T12:15:09.797

Modified: 2023-04-16T10:15:07.183

Link: CVE-2022-2807

JSON object: View

Redhat Information

No data.

CWE

CWE-89

{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-2807", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "assignerShortName": "TR-CERT", "datePublished": "2022-11-25T00:00:00", "dateUpdated": "2023-09-03T15:44:38.319Z", "dateReserved": "2022-08-12T00:00:00"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Prens Student Information System", "vendor": "Algan Software", "versions": [{"lessThan": "2.1.11", "status": "affected", "version": "0", "versionType": "custom"}]}], "datePublic": "2022-11-24T21:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection.<p>This issue affects Prens Student Information System: before 2.1.11.</p>"}], "value": "SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection.This issue affects Prens Student Information System: before 2.1.11.\n\n"}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2023-09-03T15:44:38.319Z"}, "references": [{"tags": ["government-resource"], "url": "https://www.usom.gov.tr/bildirim/tr-22-0708"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>\n\nAlgan Software Prens Student Information System should be updated to >= 2.1.11.\n\n</p>"}], "value": "\nAlgan Software Prens Student Information System should be updated to >= 2.1.11.\n\n\n\n"}], "source": {"advisory": "TR-22-0708", "defect": ["TR-22-0708"], "discovery": "EXTERNAL"}, "title": "SQL Injection in Prens Student Information System", "x_generator": {"engine": "Vulnogram 0.0.9"}}}}