PT-2025-38756 · Alpes Recherche Et Developpement · Ard Gec En Lign

Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-55885

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Alpes Recherche et Developpement ARD GEC en Lign versions prior to 2025-04-23

Description A SQL Injection issue exists in Alpes Recherche et Developpement ARD GEC en Lign. A remote attacker can potentially escalate privileges by manipulating the GET parameters within the 'index.php' file. The vulnerable parameter is accessed through the index.php API endpoint.

Recommendations Update Alpes Recherche et Developpement ARD GEC en Lign to version 2025-04-23 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-55885

Affected Products

Ard Gec En Lign

References · 7

• 🔥 https://github.com/0xZeroSec/CVE-2025-55885 · Exploit
• https://osv.dev/vulnerability/CVE-2025-55885 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55885 · Security Note
• http://alpes.com · Note
• http://ard.com · Note
• https://twitter.com/CVEnew/status/1970184001496158637 · Twitter Post
• https://services.ard.fr/index.php · Note