CVE ID :CVE-2026-34105 Published : July 1, 2026, 4:15 p.m. | 57 minutes ago Description :Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, type FROM files where id = '\".$_GET['id'].\"'....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-34105 - Guardian Language-System Unauthenticated SQL Injection via id Parameter in translate_text.php

VERWANDTEARTIKEL

CVE-2026-48281

CVE-2026-48277

CVE-2026-34107 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate.php

CVE-2026-34102 - Guardian Language-System Unauthenticated SQL Injection via id Parameter in job_info_get.php

CVE-2026-34099 - Guardian Language-System Unauthenticated SQL Injection via id Parameter in job_info.php

Critical Cursor IDE RCE Vulnerabilities Enable Prompt Injection in Zero-Click