Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-13004 EUVD-2025-207406GHSA-2xqp-gcm9-67f8

IDOR in Farktor Software's E-Commerce Package

Published Feb 12, 2026 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Manipulating User-Controlled Variables.

This issue affects E-Commerce Package: through 27112025.

Affected products

VendorProductAffectedFixed
Farktor Software E-Commerce Services E-Commerce Package ≤ 27112025 —

References