This vulnerability affects SourceCodester Online Examination & Learning Management System version 1.0. It is caused by improper authorization checks in the /view.php file, where manipulation of the ID parameter allows an attacker with limited privileges to bypass authorization restrictions remotely. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low impact on confidentiality. No known exploits are reported in the wild, and no vendor-provided fix or mitigation is documented.

An attacker can remotely bypass authorization controls by manipulating the ID argument in the vulnerable endpoint, potentially gaining unauthorized access to restricted resources or data. The impact is rated medium based on the CVSS score of 5.3, reflecting limited confidentiality impact and no requirement for user interaction or elevated privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoint where possible and monitor for suspicious activity related to unauthorized access attempts. Avoid exposing the vulnerable system to untrusted networks if feasible.