Live › vulnerability › CVE-2025-68393
ARKETEAM Protectel modules PROTECTELMAJ and BDF accept crafted input in the "Utilisateur" parameter without neutralizing it. A low-privileged user can use this to run SQL injection against the backend database.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 12:30 UTC. All times on this page are UTC.
Teams running ARKETEAM Protectel with the PROTECTELMAJ or BDF modules installed are exposed. A low-privileged account is enough to reach the vulnerable "Utilisateur" parameter. unknown whether other Protectel modules or configurations are affected.
No product ranges from the sources yet.
6.5.196.4.67Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into "Utilisateur" parameter allows for SQL Injection attacks. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67
This page as .md · .json · in your agent: get_signal("CVE-2025-68393")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.