GHSA-cfq6-4647-8w5hCriticalCVSS 9.8
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in...
🔗 CVE IDs covered (1)
📋 Description
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type, duration, owner, private FROM files where id = '".$_GET['id']."'. An authenticated attacker can perform error-based SQL injection to extract database contents.