The Barangay Resident Profiling Management System 1.0 contains an authorization bypass vulnerability in the /boarders.php file within its Boarder Management Module. This flaw arises from improper handling of the ID argument, allowing remote attackers with low privileges to escalate their access rights without user interaction. The vulnerability is identified as CWE-285 (Improper Authorization). The CVSS 3.1 base score is 6.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. Public exploit code exists, but no active exploitation has been confirmed. No vendor advisory or patch information is available at this time.

Successful exploitation allows an attacker to bypass authorization controls remotely, potentially leading to unauthorized access to sensitive information or modification of data within the Boarder Management Module. The impact affects confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected module and monitor for suspicious activity related to the /boarders.php endpoint. Avoid exposing this functionality to untrusted networks if possible.