2 matches found
CVE-2026-34102 Guardian Language-System SQL Injection via id Parameter in job_info_get.php
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in jobinfoget.php line 16: SELECT FROM jobs where input1 = '".$GET'id'."'. An authenticated attacker can perform error-based SQL injection to extract database contents...
8.7CVSS5.9AI score
SaveExploits0References5
CVE-2026-34102
Guardian language-system is vulnerable to error-based SQL injection in job_info_get.php (line 16), where the id GET parameter is passed directly into an unsanitized SQL query (SELECT * FROM jobs where input1 = '...'). An authenticated attacker can exploit this to extract database contents. CVSS v...
8.8CVSS5.9AI score0.00456EPSS
SaveExploits0References2
20