Description
A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely.
Published: 2026-08-06
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability resides in SourceCodester Online Examination & Learning Management System 1.0 and targets the file /view.php. Manipulating the ID argument permits an attacker to bypass normal authorization checks, granting unauthorized access to protected content or functionality. The weakness aligns with CWE‑285 (Authorization Bypass Through User‑Controlled Key) and CWE‑639 (Authorization Bypass via Privilege Escalation).

Affected Systems

SourceCodester Online Examination & Learning Management System 1.0 is affected; the vulnerability originates from unknown code within the /view.php module. No other vendors or product versions are listed as impacted.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity for this remote exploit. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog. The attack requires remote access to the web interface and the ability to supply a crafted ID parameter, after which an unauthorized user can view or manipulate restricted data.

Generated by OpenCVE AI on August 6, 2026 at 23:41 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the official patch or upgrade to the latest release of the system to correct the view.php authorization logic.
  • Implement strict input validation and constraints on the ID parameter to prevent manipulation of the identifier.
  • Enforce role‑based access control checks on /view.php so that only authorized users can view the corresponding content.

Generated by OpenCVE AI on August 6, 2026 at 23:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 06 Aug 2026 22:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely.
Title SourceCodester Online Examination & Learning Management System view.php authorization
First Time appeared Sourcecodester
Sourcecodester online Examination Learning Management System
Weaknesses CWE-285
CWE-639
CPEs cpe:2.3:a:sourcecodester:online_examination_learning_management_system:*:*:*:*:*:*:*:*
Vendors & Products Sourcecodester
Sourcecodester online Examination Learning Management System
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:P/I:N/A:N/E:ND/RL:ND/RC:UR'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X'}

Subscriptions

Sourcecodester Online Examination Learning Management System
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-06T17:30:10.276Z

Reserved: 2026-08-06T08:38:49.267Z

Link: CVE-2026-19064

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-06T23:45:03Z

Weaknesses
  • CWE-285

    Improper Authorization

  • CWE-639

    Authorization Bypass Through User-Controlled Key