Guardian language-system accepts the id GET parameter and concatenates it directly into an SQL SELECT statement without sanitization. This flaw can be exploited by an attacker who can control the id value, allowing error-based SQL injection that reveals the contents of the files table, such as filenames, extensions, types, durations, owners, and privacy flags. The vulnerability represents a classic data‑exfiltration weakness identified as CWE‑89 and potentially compromises the confidentiality of data stored in the application database.

The flaw exists in the Guardian language-system application, specifically within text_file.php. No version details are disclosed, so any deployment that includes this component is potentially affected. The issue is limited to instances that expose text_file.php to user input.

The CVSS score of 9.3 indicates a high‑severity problem. Exploitation requires the attacker to be authenticated to the application and then send a crafted GET request to text_file.php with a malicious id value. The low EPSS score (< 1%) suggests that exploitation is currently unlikely, and the vulnerability is not listed in the CISA KEV catalog. The impact is confined to the data returned by the SELECT query.