This vulnerability in PHPGurukul Bank Locker Management System 1.0 allows an attacker to bypass authorization controls by manipulating the 'ltid' parameter in the /blms/view-assign-locker.php script. The flaw enables remote attackers to gain unauthorized access to functionality or data that should be restricted. The exploit is publicly available, increasing the risk of exploitation. No vendor patch or official remediation information is provided in the input data.

Successful exploitation results in unauthorized access to restricted functions or data within the Bank Locker Management System. This could lead to exposure or manipulation of sensitive locker assignment information. The vulnerability is remotely exploitable without any privileges or user interaction, increasing its risk. However, no evidence of active exploitation in the wild is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoint and monitor for suspicious activity related to the 'ltid' parameter. Avoid exposing the vulnerable interface to untrusted networks if possible.