CVE-2026-85215: SQL Injection in GG Soft's Paperwork
Published Oct 2, 2026
·Updated
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection.
This issue affects Paperwork: through 2026-09-09.
Affected Software
1 affected component
GG Soft PaperWork
Event History
Oct 2, 2026
CVE Published
via MITRE·01:01 PM
Data Sourced
via MITRE·01:01 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The vulnerability is network-accessible and has low attack complexity, but the attacker must already have low-level privileges. No user interaction is required.
2
What is the likely security impact if exploitation succeeds?
The CVSS vector indicates high confidentiality impact and low integrity impact. It does not indicate an availability impact.