CVE-2026-78142
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability in code-projects Barangay Resident Profiling Management System 1.0 in an unknown function of the /archived_records.php file of the Restore/Delete component. Manipulation of the resident_id argument results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used.
Risk Assessment
A remote attacker can bypass authorization and perform unauthorized restore or delete operations, potentially leading to data integrity compromise.
Recommendation
It is recommended to immediately update the system or apply vendor patches. Also strengthen access controls and validate identifiers.
Other vulnerabilities in Barangay Resident Profiling Management System
See all- CVE-2026-78144Medium
A vulnerability in code-projects Barangay Resident Profiling Management System 1.0 in an unknown function of the /boarders.php file of the Boarder Management Module component. Manipulation of the ID argument leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used.
- CVE-2026-78143High
A vulnerability in code-projects Barangay Resident Profiling Management System 1.0 in an unknown function of the residents.php file of the Resident Search Functionality component. Manipulation of the Search argument causes SQL injection. Remote exploitation is possible. The exploit has been publicly disclosed and may be utilized.
Original NVD description (English source)
A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component Restore/Delete. The manipulation of the argument resident_id results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used.