Authorization Bypass in SourceCodester Online Examination & Learning Management System
CVE-2026-19064

5.3MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Online Examination & Learning Management System
Vendor
CVE Published:
6 August 2026

What is CVE-2026-19064?

A vulnerability in the SourceCodester Online Examination & Learning Management System version 1.0 allows attackers to manipulate the argument ID in the /view.php file, resulting in an unauthorized access mechanism. This issue enables remote attackers to bypass normal authentication and gain inappropriate access to protected resources. It's crucial for administrators to assess their installations and apply necessary security measures to mitigate this risk.

Affected Version(s)

Online Examination & Learning Management System 1.0

References

https://vuldb.com/vuln/386533
vdb-entrytechnical-description
https://vuldb.com/vuln/386533/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-19064
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adnan (VulDB User)
VulDB Vulnerability Moderation Team
.