PT-2026-7840 · Farktor · Farktor Software E-Commerce Package

Berat Arslan · Published 2026-02-12 · Updated 2026-02-13 · CVE-2025-10969

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Farktor Software E-Commerce Package versions through 27112025

Description The software contains an improper neutralization of special elements used in an SQL command, leading to a Blind SQL Injection issue. This allows for potential unauthorized access to or modification of data within the database.

Recommendations Versions prior to 27112025 should be updated.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-10969

Affected Products

Farktor Software E-Commerce Package

References · 7

• https://osv.dev/vulnerability/CVE-2025-10969 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10969 · Security Note
• https://usom.gov.tr/bildirim/tr-26-0063 · Note
• https://twitter.com/CveFindCom/status/2022373079117177240 · Twitter Post
• https://t.me/cveNotify/151831 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2021977104150122498 · Twitter Post
• https://t.me/CVEtracker/44526 · Telegram Post