Executive brief
The Guardian language-system, a tool used for automatic translation and subtitling, contains a security flaw in how it handles file identification. An attacker can exploit this to gain unauthorized access to the underlying database, potentially exposing sensitive information or modifying system data. This could lead to a complete compromise of the application's data integrity and confidentiality.
Technical details
A SQL injection vulnerability exists in the Guardian language-system due to improper sanitization of the 'id' GET parameter in 'text_file.php'. The application passes this parameter directly into a SQL query string at line 17. While some reports suggest authentication is required, the CVSS metrics and specific advisory details indicate it may be exploitable without authentication (PR:N). An attacker can use error-based SQL injection techniques (such as using GTID_SUBSET in MySQL) to extract sensitive information, including database versions, user accounts, and table contents. The vulnerability affects versions up to and including git commit e42c395.
Affected products
- Guardian language-system <= commit e42c395ec4b03fe62973a669c9209a673838b8a4
Timeline
- 2026-07-01: disclosed: Researcher disclosure by philopentest via GitHub Gist
- 2026-07-01: advisory: NVD and VulnCheck published advisory details