high8.4
CVE-2025-68393
ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability.
Impact
ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into "Utilisateur" parameter allows for SQL Injection attacks. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ARKETEAM | BDF | before 6.4.67 |
| ARKETEAM | PROTECTELMAJ | before 6.5.19 |