Vulnerabilidades de GG Soft Software Services Inc.
CVEs publicadas que afetam produtos de GG Soft Software Services Inc.: 2 registro(s), com severidade, exploração e correções.
CVE-2025-14101
Alta · 7.1
CWE-639 17/12/2025
IDOR in GG Soft's PaperWork
Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers.
This issue affects PaperWork: from 5.2.0.9427 before 6.0.
CVE-2025-10968
Alta · 8.8
CWE-89 07/11/2025
SQLi in GG Soft's PaperWork
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc. PaperWork allows Blind SQL Injection, SQL Injection.
This issue affects PaperWork: from 6.1.0.9390 before 6.1.0.9398.