Farktor E-commerce Package vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Farktor E-commerce Package: 3 record(s), with affected versions and fixes.cpe:2.3:a:farktor:e-commerce_package
CVE-2025-13004
Medium · 6.3
CWE-639 Feb 12, 2026
IDOR in Farktor Software's E-Commerce Package
Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Manipulating User-Controlled Variables.
This issue affects E-Commerce Package: through 27112025.
CVE-2025-13002
Medium · 6.1
CWE-79 Feb 12, 2026
XSS in Farktor Software's E-Commerce Package
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS).
This issue affects E-Commerce Package: through 27112025.
CVE-2025-10969
Critical · 9.8
CWE-89 Feb 12, 2026
SQLi in Farktor Software's E-Commerce Package
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL Injection.
This issue affects E-Commerce Package: through 27112025.