CVE-2026-34102

Name of the Vulnerable Software and Affected Versions Guardian language-system (affected versions not specified)

Description An authenticated attacker can perform error-based SQL injection to extract database contents. This occurs because the application passes the id parameter from the GET request directly into an unsanitized SQL query within the 'job info get.php' file. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, allowing unauthorized access to database data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the id parameter in the 'job info get.php' endpoint until the issue is resolved.