Vendor
22 published CVES affecting guardian, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Guardian language-system passes the id GET parameter directly into a PHP exec() call in text_to_subtitles.php (line 19) without sanitization: exec("php jobs/text_to_subtitles.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote at...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe.php (line 15) without sanitization: exec("php jobs/transcribe.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote attacker can app...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe_amazon.php (line 15) without sanitization: exec("php jobs/transcribe_amazon.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote at...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate_text.php (line 18) without sanitization: exec("php jobs/translate_text.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote attacker...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech_text.php (line 18) without sanitization: exec("php jobs/speech_audio_text.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote attacker...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac.php (line 18) without sanitization: exec("php jobs/speech_audio_mac.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote attacker ca...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac_text.php (line 18) without sanitization: exec("php jobs/speech_audio_mac_text.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote a...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_start.php (line 14) without sanitization: exec("php jobs/complex.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote attacker can app...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec("php jobs/speech_audio.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote attacker can appen...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in text.php (line 15) without sanitization: exec("php jobs/text.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote attacker can append shell me...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without sanitization: exec("php jobs/translate.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote attacker can appen...
Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec("php jobs/subtitle_rendering.php ".$login_session." ".$_GET['id']." ..."). No authentication is required. An unauthenticated remote attacker...
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, type FROM files where id = '".$_GET['id']."'. An authenticated attacker can perform error-based SQL injection to extract da...
Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in designer.php (line 124): SELECT * FROM complex WHERE name='".$_GET['name']."'. An authenticated attacker can perform error-based SQL injection to extract database contents.
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in subtitles.php (line 16): SELECT id, filename, extension, type FROM files where id = '".$_GET['id']."'. An authenticated attacker can perform error-based SQL injection to extract databas...
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info_get.php (line 16): SELECT * FROM jobs where input1 = '".$_GET['id']."'. An authenticated attacker can perform error-based SQL injection to extract database contents.
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in text_file.php (line 17): SELECT id, filename, extension, type, duration, owner, private FROM files where id = '".$_GET['id']."'. An authenticated attacker can perform error-based SQL in...
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type, duration, owner, private FROM files where id = '".$_GET['id']."'. An authenticated attacker can perform error-based SQL inject...
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info.php (line 16): SELECT * FROM jobs where id = '".$_GET['id']."'. No authentication is required. An unauthenticated attacker can perform error-based SQL injection to extract the...
Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php (lines 119, 129). An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session.
Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in text_file.php (lines 94, 101, 323, 403, 826, 852). An authenticated attacker can craft a URL that injects script tags executing in the victim's browser...
Guardian language-system fails to sanitize the name GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). An authenticated attacker can craft a URL containing script tags that execute in the victim's browser session.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.