CVE-2025-10968: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc. PaperWork allows Blind SQL Injection, SQL Injection. This issue affects PaperWork: from 6.1.0.9390 before 6.1.0.9398...

PT-2025-45420

Name of the Vulnerable Software and Affected Versions PaperWork versions 6.1.0.9390 through 6.1.0.9397 Description The software contains a flaw due to improper neutralization of special elements used in an SQL command, leading to a SQL injection issue. This impacts the application's ability to...

GG Soft PaperWork SQL注入漏洞

GG Soft PaperWork is a document management and process control software from GG Soft, Turkey. A SQL injection vulnerability exists in GG Soft PaperWork version 6.1.0.9390 up to and including version 6.1.0.9398. The vulnerability stems from the Hibernate framework not handling special elements in...