This vulnerability affects the password reset handler in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The issue arises from a hard-coded password ('password123') being used when resetting passwords via the password_reset.php script. This allows an unauthenticated remote attacker to potentially bypass authentication controls by leveraging this fixed password. The CVSS 4.0 base score is 6.9, indicating a medium severity with network attack vector, no privileges required, no user interaction, and low impact on integrity.

Exploitation of this vulnerability could allow an attacker to bypass authentication or reset passwords using the hard-coded password, potentially leading to unauthorized access to user accounts or administrative functions. The impact is limited to the affected version 1.0 of the software. There are no known exploits in the wild at this time.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's advisory channels for updates. As a temporary measure, restricting access to the password reset functionality or implementing additional authentication checks may reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.