The vulnerability in SourceCodester Online Examination & Learning Management System 1.0 involves improper authorization checks in the /view.php component. By manipulating the ID parameter, an attacker with limited privileges can bypass authorization restrictions, potentially accessing unauthorized data or functionality. The vulnerability is remotely exploitable without user interaction and requires low attack complexity. No vendor advisory or patch information is currently available, and no active exploitation has been reported.

Successful exploitation allows an attacker to bypass authorization controls, potentially gaining unauthorized access to restricted resources or information within the application. The impact is limited to the affected version 1.0 of the software. There is no indication of privilege escalation beyond the bypass or of other impacts such as data integrity or availability loss.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected application and monitor for suspicious activity related to the /view.php endpoint. Avoid exposing the vulnerable system to untrusted networks where possible.