High severity8.8NVD Advisory· Published Nov 7, 2025· Updated Jun 5, 2026

CVE-2025-10968

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc. PaperWork allows Blind SQL Injection, SQL Injection.

This issue affects PaperWork: from 6.1.0.9390 before 6.1.0.9398.

Affected products

GG Soft Software Services Inc./PaperWorkllm-fuzzy
Range: >=6.1.0.9390 <6.1.0.9398

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0381nvd
www.usom.gov.tr/bildirim/tr-25-0381nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000