{"id":"CVE-2025-68393","kind":"vulnerability","aliases":["CVE-2025-68393"],"related":[],"title":"ARKETEAM Protectel modules: SQL injection via Utilisateur parameter","description":"ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into \"Utilisateur\" parameter allows for SQL Injection attacks.\nThis issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67","summary":"ARKETEAM Protectel modules PROTECTELMAJ and BDF accept crafted input in the \"Utilisateur\" parameter without neutralizing it. A low-privileged user can use this to run SQL injection against the backend database.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["arketeam","other","protectel","sql-injection"],"not_affected_if":["modules-patched","protectel-not-installed"],"how_to_check":"- Check the installed PROTECTELMAJ and BDF module versions against the fixed versions listed below.","fix":"- PROTECTELMAJ: `6.5.19`\n- BDF: `6.4.67`","status":"open","published_at":"2026-10-30T12:16:33+00:00","first_seen_at":"2026-10-30T12:30:22+00:00","triaged_at":"2026-10-30T12:32:10+00:00","updated_at":"2026-10-30T12:32:10+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-30T12:32:10Z","model":"claude-haiku-5-5","output":{"fix":"- PROTECTELMAJ: `6.5.19`\n- BDF: `6.4.67`","reach":"network","title":"ARKETEAM Protectel modules: SQL injection via Utilisateur parameter","impact":"high","summary":"ARKETEAM Protectel modules PROTECTELMAJ and BDF accept crafted input in the \"Utilisateur\" parameter without neutralizing it. A low-privileged user can use this to run SQL injection against the backend database.","audience":"businesses","category":"other","nicknames":[],"who_cares":["arketeam","protectel","sql-injection"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"database contents readable or modified by a low-privileged user","analyst_note":"Confirm the affected version ranges and the fixed-version rules for PROTECTELMAJ and BDF at https://nvd.nist.gov/vuln/detail/CVE-2025-68393; the sources give only the fixed versions.","how_to_check":"- Check the installed PROTECTELMAJ and BDF module versions against the fixed versions listed below.\n- unknown for any other check; the sources do not say.","plain_action":"","needs_analyst":true,"not_affected_if":["protectel-not-installed","modules-patched"],"who_is_affected":"Teams running ARKETEAM Protectel with the PROTECTELMAJ or BDF modules installed are exposed. A low-privileged account is enough to reach the vulnerable \"Utilisateur\" parameter. unknown whether other Protectel modules or configurations are affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00071,"input_tokens":4157,"output_tokens":588,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2025':10A,13A '-68393':11A,14A 'accept':27B 'allow':78C 'arketeam':1A,15B,21B,53C 'attack':82C 'backend':51B 'bdf':26B,58C,92C 'craft':28B 'cve':9A,12A 'databas':52B 'fix':87C 'improp':65C 'inject':5A,20B,48B,63C,81C 'input':29B,68C 'issu':84C 'low':39B,72C 'low-privileg':38B 'modul':3A,23B,55C 'neutral':35B,66C 'paramet':8A,33B,77C 'privileg':40B,73C 'protectel':2A,17B,22B,54C 'protectelmaj':24B,56C,89C 'provid':69C 'run':46B 'sql':4A,19B,47B,62C,80C 'sql-inject':18B 'use':43B 'user':41B,74C 'utilisateur':7A,32B,76C 'v6.4.67':93C 'v6.5.19':90C 'via':6A 'vulner':60C,64C 'without':34B","nicknames":[],"mitigations":[],"who_affected":"Teams running ARKETEAM Protectel with the PROTECTELMAJ or BDF modules installed are exposed. A low-privileged account is enough to reach the vulnerable \"Utilisateur\" parameter. unknown whether other Protectel modules or configurations are affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T12:16:33+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cvd@cert.pl","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-68393","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68393","severity":null,"published_at":"2026-10-30T12:16:33+00:00","modified_at":"2026-10-30T12:16:33+00:00","first_seen_at":"2026-10-30T12:30:22+00:00","fetched_at":"2026-10-30T12:30:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}