PT-2026-7840 · Farktor · Farktor Software E-Commerce Package

Berat Arslan · CVE-2025-10969 · Published 2026-02-12 · Updated 2026-02-13

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Farktor Software E-Commerce Package versions through 27112025

Description The software contains an improper neutralization of special elements used in an SQL command, leading to a Blind SQL Injection issue. This allows for potential unauthorized access to or modification of data within the database.

Recommendations Versions prior to 27112025 should be updated.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-10969

Affected Products

Farktor Software E-Commerce Package

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-10969 · Security Note
• https://osv.dev/vulnerability/CVE-2025-10969 · Vendor Advisory
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0063 · Note
• https://twitter.com/CveFindCom/status/2022373079117177240 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2021977104150122498 · Twitter Post
• https://t.me/cveNotify/151831 · Telegram Post
• https://t.me/CVEtracker/44526 · Telegram Post
• https://usom.gov.tr/bildirim/tr-26-0063 · Note