Farktor Software E-Commerce Services Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Farktor Software E-Commerce Services Inc. products: 3 record(s), with severity, exploitation and fixes.

E-Commerce Package 3

Exploited only (KEV) →

CVE-2025-13004 Medium · 6.3 CWE-639 Feb 12, 2026

IDOR in Farktor Software's E-Commerce Package

Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Manipulating User-Controlled Variables. This issue affects E-Commerce Package: through 27112025.

CVE-2025-13002 Medium · 6.1 CWE-79 Feb 12, 2026

XSS in Farktor Software's E-Commerce Package

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS). This issue affects E-Commerce Package: through 27112025.

CVE-2025-10969 Critical · 9.8 CWE-89 Feb 12, 2026

SQLi in Farktor Software's E-Commerce Package

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL Injection. This issue affects E-Commerce Package: through 27112025.