This vulnerability in Barangay Resident Profiling Management System 1.0 allows an attacker to bypass authorization controls by manipulating the resident_id parameter in the /archived_records.php file within the Restore/Delete component. This flaw enables unauthorized users to perform actions or access data they should not be permitted to. The vulnerability is remotely exploitable and public exploit code exists. No official patch or remediation guidance is currently provided by the vendor or authoritative sources.

An attacker can remotely bypass authorization controls, potentially gaining unauthorized access to or control over archived resident records. This could lead to unauthorized data exposure or modification within the affected system. The medium CVSS score reflects limited privileges required but significant impact on confidentiality and integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected component and monitor for suspicious activity related to the resident_id parameter. Implement additional access controls or input validation if possible.