CVE-2026-19064

Received Received - Intake

Authorization Bypass in Online Examination & Learning Management System

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-06

Generated

2026-08-07

AI Q&A

2026-08-07

EPSS Evaluated

N/A

NVD

CVE-2026-19064

Affected Vendors & Products

Vendor	Product	Version / Range
sourcecodester	online_examination_and_learning_management_system	1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability is an authorization bypass in the Online Examination & Learning Management System 1.0. It allows remote attackers to manipulate the ID argument in the /view.php file to gain unauthorized access without proper authentication.

Detection Guidance

This vulnerability involves authorization bypass in the Online Examination & Learning Management System via the /view.php file by manipulating the ID argument. To detect it, inspect web server logs for unusual requests to /view.php with modified ID parameters. Check for unauthorized access attempts or data exposure in logs. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to access sensitive data, alter exam results, or perform unauthorized actions in the system. It compromises the integrity and confidentiality of the examination platform.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, violating GDPR (data protection) and HIPAA (health information privacy) requirements. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Immediately restrict access to the /view.php file and validate all user inputs, especially the ID parameter. Update to the latest patched version if available or apply vendor-supplied fixes.

Hi! I’m here to help you understand CVE-2026-19064. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70