Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-68393

SQL Injection in Protectel

Description

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into "Utilisateur" parameter allows for SQL Injection attacks. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ARKETEAM PROTECTELMAJ

Default version status: unaffected

  • 0 to < 6.5.19affected

ARKETEAM BDF

Default version status: unaffected

  • 0 to < 6.4.67affected

References