Unauthenticated SQL Injection in Guardian Language-System by Asthenic Technologies
⚠️ CVE-Referenzen:
CVE-2026-34099
Guardian - Language-system - CRITICAL - CVE-2026-34099.
The Guardian Language-System is vulnerable due to improper handling of the GET parameter 'id' in the job_info.php file. This vulnerability allows an unauthenticated attacker to execute an error-based SQL injection, potentially exposing sensitive database information such as the database version, current user, schema names, and the contents of tables. The flaw goes undetected as no authentication is required to exploit it, making it a critical vector for database compromise.
BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io
Quelle: securityvulnerability.io