Threat database

CVE-2026-85215 is a high severity SQL injection vulnerability in GG Soft Software Services Inc.'s Paperwork application. It allows improper neutralization of special elements in SQL commands, potentially enabling unauthorized data access or manipulation. The vulnerability affects versions of Paperwork up to 2026-09-09. It requires low attack complexity and privileges, with no user interaction needed. Confidentiality impact is high, integrity impact is low, and availability is not affected.

Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers. This issue affects PaperWork: from 5.2.0.9427 before 6.0.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc. PaperWork allows Blind SQL Injection, SQL Injection. This issue affects PaperWork: from 6.1.0.9390 before 6.1.0.9398.