This vulnerability affects SourceCodester Online Examination & Learning Management System 1.0. It involves an authorization bypass caused by improper validation or handling of the class_group parameter in the view_students.php script. An attacker with low privileges can remotely manipulate this argument to bypass authorization controls, potentially gaining unauthorized access to restricted information or functionality. The CVSS 4.0 base score is 5.3, indicating medium severity. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

Successful exploitation allows an attacker with low privileges to bypass authorization controls remotely, potentially exposing sensitive student information or administrative functions within the system. The impact is limited to unauthorized access but does not include privilege escalation, user interaction, or confidentiality/integrity/availability violations beyond the bypass itself.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected view_students.php functionality to trusted users only and monitor for suspicious activity related to manipulation of the class_group parameter.