ARKETEAM Protectel modules PROTECTELMAJ and BDF contain an SQL injection vulnerability due to improper neutralization of user input in the "profilInput" parameter. This flaw allows a low privileged user to perform SQL injection attacks. The vulnerability has been fixed in PROTECTELMAJ version 6.5.19 and BDF version 6.4.67.