CVE ID :CVE-2026-34107 Published : July 1, 2026, 4:16 p.m. | 56 minutes ago Description :Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without sanitization: exec(\"php jobs/translate.php \".$login_session.\" \".$_GET['id'].\"...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-34107 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate.php

VERWANDTEARTIKEL

CVE-2026-48281

CVE-2026-48277

CVE-2026-34105 - Guardian Language-System Unauthenticated SQL Injection via id Parameter in translate_text.php

CVE-2026-34102 - Guardian Language-System Unauthenticated SQL Injection via id Parameter in job_info_get.php

CVE-2026-34099 - Guardian Language-System Unauthenticated SQL Injection via id Parameter in job_info.php

Critical Cursor IDE RCE Vulnerabilities Enable Prompt Injection in Zero-Click