Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, type FROM files where id = '\".$_GET[\'id\'].\"'. An authenticated attacker can perform error‑based SQL injection to extract database contents. The vulnerability allows a user‑supplied id parameter to be concatenated into a SQL statement, enabling the attacker to read sensitive data from the database, causing a compromise of data confidentiality but not code execution or denial of service.

The flaw resides in the Guardian language‑system web translation component, specifically within the translate_text.php file handling id parameters. No specific software version is listed, so the issue may exist in any path where the component is deployed.

Based on the description, it is inferred that the flaw can be exploited remotely through a web request. The CVSS score of 9.3 signals critical severity, while the EPSS score of < 1% indicates a very low but non‑zero probability of exploitation. With no KEV listing, the threat’s current context remains limited, yet the high confidentiality impact warrants prompt remediation.