Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Farktor Software E-Commerce Services Inc. Clear all filters
TI-2025-11906 CVE-2025-13004 · GHSA-2xqp-gcm9-67f8

IDOR in Farktor Software's E-Commerce Package

Priority LOW 28

Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00294 Published 2026-02-12 No fix listed CWE-639
TI-2025-11904 CVE-2025-13002 · GHSA-cmjp-m265-83j5

XSS in Farktor Software's E-Commerce Package

Priority MEDIUM 41

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00248 Published 2026-02-12 No fix listed CWE-79
TI-2025-10044 CVE-2025-10969 · GHSA-793m-9x46-97m4

SQLi in Farktor Software's E-Commerce Package

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00389 Published 2026-02-12 No fix listed CWE-89