CVE-2026-78115: Improper Authorization in SourceCodester Class and Exam Timetabling System

This vulnerability in SourceCodester Class and Exam Timetabling System 1.0 involves improper authorization in the User Account Update functionality located in /admin/edit_user_account.php. By manipulating the id or username arguments, an attacker can bypass authorization checks, potentially allowing unauthorized access or modification of user accounts. The vulnerability is remotely exploitable and public exploit information is available. No patch or remediation details are provided in the input data.

An attacker can remotely exploit this vulnerability to bypass authorization controls in the user account update process, potentially allowing unauthorized modification of user accounts. This could lead to privilege escalation or unauthorized access to sensitive user information. The CVSS score of 5.3 indicates a medium impact severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided. Until a patch is available, restrict access to the affected functionality and monitor for suspicious activity related to user account updates.