CVE-2026-19064

Name of the Vulnerable Software and Affected Versions SourceCodester Online Examination & Learning Management System version 1.0

Description An authorization bypass exists in the /view.php endpoint. A remote attacker can manipulate the ID argument to bypass authorization controls.

Recommendations Update SourceCodester Online Examination & Learning Management System version 1.0 to a version that addresses this issue. As a temporary workaround, restrict access to the /view.php endpoint or avoid using the ID argument until a fix is applied.