Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-10969 EUVD-2025-207403GHSA-793m-9x46-97m4

SQLi in Farktor Software's E-Commerce Package

Published Feb 12, 2026 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL Injection.

This issue affects E-Commerce Package: through 27112025.

Affected products

VendorProductAffectedFixed
Farktor Software E-Commerce Services E-Commerce Package ≤ 27112025 —

References