Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in designer.php (line 124): SELECT * FROM complex WHERE name='\".$…

CVE-2026-34104 affects the Guardian language-system application, where the 'name' GET parameter is passed directly into an unsanitized SQL query in designer.php at line 124. The vulnerable query is: SELECT * FROM complex WHERE name='".$_GET['name']."'. An authenticated attacker can exploit this flaw to perform error-based SQL injection, potentially extracting sensitive database contents. The vulnerability resides in a PHP file and stems from a lack of input sanitization or parameterized queries. While authentication is required, the attack is straightforward for any logged-in user. The issue has been documented on NVD, VulnCheck, and GitHub. It represents a significant risk to confidentiality and data integrity for deployments of this software.