Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-13150 EUVD-2024-55027GHSA-xj8g-rv83-qgcv

SQLi in Fayton Software's fayton.pro ERP

Published Sep 29, 2025 · Updated Jun 1, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fayton Software and Consulting Services fayton.Pro ERP allows SQL Injection.

This issue affects fayton.Pro ERP: through 20250929.

Affected products

VendorProductAffectedFixed
Fayton Software and Consulting Services fayton.pro ERP ≤ 20250929 —

References