CVE-2026-34101

Name of the Vulnerable Software and Affected Versions Guardian language-system (affected versions not specified)

Description An authenticated attacker can perform error-based SQL injection to extract database contents. This occurs because the application passes the id GET parameter directly into an unsanitized SQL query within the 'text file.php' file at line 17. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, allowing unauthorized access to database data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the id parameter in the 'text file.php' endpoint until the issue is resolved.