CVE-2025-10969Disclosure(farktor / e-commerce_package)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch farktor e-commerce_package systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL Injection. This issue affects E-Commerce Package: through 27112025.

farktor CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.usom.gov.tr/bildirim/tr-26-0063

Other references

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0063

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

e-commerce_package

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 3 mentions (2026-02-12); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

farktor

Products

e-commerce_package

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-12	3	Disclosure2General1
2026-02-13	1	Disclosure1

Full discourse4 posts

Vulmon Vulnerability Feed@VulmonFeeds239d
Disclosure
CVE-2025-10969 Blind SQL Injection Vulnerability in Farktor Software E-Commerce Package https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-10969
Post summary
The text announces CVE-2025-10969, detailing a blind SQL injection flaw in the Farktor e‑commerce package, with no evidence of a PoC, exploitation, or mitigation.
0001040
4.0K followersView on X
CVE@CVEnew239d
General
CVE-2025-10969 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package all… https://www.cve.org/CVERecord?id=CVE-2025-10969
Post summary
CVE-2025-10969 is an SQL injection flaw in Farktor Software's e‑commerce package; the brief notice lists the vulnerability type but provides no PoC, exploit, or remediation details.
00010193
56.5K followersView on X
CVEFind.com@CveFindCom238d
Disclosure
[CVE-2025-10969: CRITICAL] Critical SQL Injection vulnerability discovered in Farktor Software E-Commerce Package allowing unauthorized database access. Update required for versions up to 27112025.#cve,CVE-2025-10969,#cybersecurity https://cvefind.com/CVE-2025-10969
Post summary
A critical SQL Injection vulnerability (CVE-2025-10969) in Farktor Software E‑Commerce Package has been disclosed, and users are urged to update to version 27112025 or later.
0000032
583 followersView on X
The Hacker Wire@TheHackerWire239d
Disclosure
🔴 CVE-2025-10969 - Critical Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL Injecti... https://www.thehackerwire.com/vulnerability/CVE-2025-10969/ https://t.co/haVpAxwju6
Post summary
The tweet announces a new critical SQL injection vulnerability (CVE‑2025‑10969) in Farktor Software’s e‑commerce package, specifying the type and severity, but does not provide PoC, exploitation details, or a patch.
0000045
112 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	farktor	e-commerce_package	-	-	-

Explore more

Back to dashboard farktor CVEs e-commerce_package vulnerabilities

What researchers are saying

CVE-2025-10969

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE-2025-10969, detailing a blind SQL injection flaw in the Farktor e‑commerce package, with no evidence of a PoC, exploitation, or mitigation.

CVE@CVEnewGeneral

CVE-2025-10969 is an SQL injection flaw in Farktor Software's e‑commerce package; the brief notice lists the vulnerability type but provides no PoC, exploit, or remediation details.

CVEFind.com@CveFindComDisclosure

A critical SQL Injection vulnerability (CVE-2025-10969) in Farktor Software E‑Commerce Package has been disclosed, and users are urged to update to version 27112025 or later.

The Hacker Wire@TheHackerWireDisclosure

The tweet announces a new critical SQL injection vulnerability (CVE‑2025‑10969) in Farktor Software’s e‑commerce package, specifying the type and severity, but does not provide PoC, exploitation details, or a patch.