CVE-2026-78144
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability in code-projects Barangay Resident Profiling Management System 1.0 in an unknown function of the /boarders.php file of the Boarder Management Module component. Manipulation of the ID argument leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used.
Risk Assessment
A remote attacker can bypass authorization mechanisms and gain access to unauthorized functions or data, potentially leading to confidentiality and integrity breaches.
Recommendation
It is recommended to immediately update the system or apply vendor patches. Also strengthen access controls and validate identifiers.
Other vulnerabilities in Barangay Resident Profiling Management System
See all- CVE-2026-78143High
A vulnerability in code-projects Barangay Resident Profiling Management System 1.0 in an unknown function of the residents.php file of the Resident Search Functionality component. Manipulation of the Search argument causes SQL injection. Remote exploitation is possible. The exploit has been publicly disclosed and may be utilized.
- CVE-2026-78142Medium
A vulnerability in code-projects Barangay Resident Profiling Management System 1.0 in an unknown function of the /archived_records.php file of the Restore/Delete component. Manipulation of the resident_id argument results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used.
Original NVD description (English source)
A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used.