PT-2025-39826 · Unknown · Fayton.Pro Erp

Berkay Kirali̇ · Published 2025-09-29 · Updated 2025-10-04 · CVE-2024-13150

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions fayton.Pro ERP versions through 20250929

Description A flaw exists in fayton.Pro ERP that allows for SQL Injection. This issue enables unauthorized access to the full database with minimal effort. The vulnerability is due to improper neutralization of special elements within SQL commands.

Recommendations Versions prior to 20250929 should be updated.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-13150

Affected Products

Fayton.Pro Erp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-13150 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0304 · Note
• https://twitter.com/CVEnew/status/1972658017301594517 · Twitter Post
• https://twitter.com/0dayPublishing/status/1972649747656626216 · Twitter Post
• https://t.me/CVEtracker/33627 · Telegram Post
• https://twitter.com/cracbot/status/1974429338427666538 · Twitter Post