CVE-2026-19066

Received Received - Intake

Authorization Bypass in Online Examination & Learning Management System

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description

A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the file view_students.php. Such manipulation of the argument class_group leads to authorization bypass. The attack may be launched remotely.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-06

Generated

2026-08-07

AI Q&A

2026-08-07

EPSS Evaluated

N/A

NVD

CVE-2026-19066

Affected Vendors & Products

Vendor	Product	Version / Range
sourcecodester	online_examination_and_learning_management_system	1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability exists in SourceCodester Online Examination & Learning Management System 1.0. It allows unauthorized access by manipulating the class_group argument in the view_students.php file, bypassing authorization checks. The attack can be executed remotely.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive student data or administrative functions. This may lead to data breaches, privacy violations, or unauthorized modifications to the system.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by exposing protected health or personal data. Organizations may face legal penalties, fines, or reputational damage due to unauthorized data access.

Mitigation Strategies

Immediately restrict access to the view_students.php file and validate all user inputs, especially the class_group argument, to prevent authorization bypass. Update to the latest patched version if available.

Hi! I’m here to help you understand CVE-2026-19066. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70