{"id":"CVE-2026-78144","state":"PUBLISHED","title":"code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization","description":"A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used.","publishedAt":"2026-08-23T22:30:09.529Z","updatedAt":"2026-08-26T18:07:57.713Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["code-projects Barangay Resident Profiling Management System"],"affected":[{"vendor":"code-projects","product":"Barangay Resident Profiling Management System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:code-projects:barangay_resident_profiling_management_system:*:*:*:*:*:*:*:*"],"modules":["Boarder Management Module"]}],"references":["https://vuldb.com/vuln/394527","https://vuldb.com/vuln/394527/cti","https://vuldb.com/cve/CVE-2026-78144","https://vuldb.com/submit/882425","https://gist.github.com/c4ttr4ck/3601aa0ba9e567705823b6d425e84237","https://code-projects.org/"],"weaknesses":["CWE-639","CWE-285"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/78xxx/CVE-2026-78144.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-78144","state":"PUBLISHED","datePublished":"2026-08-23T22:30:09.529Z","dateUpdated":"2026-08-26T18:07:57.713Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-23T06:08:36.855Z"},"containers":{"cna":{"title":"code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization","descriptions":[{"lang":"en","value":"A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used."}],"affected":[{"vendor":"code-projects","product":"Barangay Resident Profiling Management System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:code-projects:barangay_resident_profiling_management_system:*:*:*:*:*:*:*:*"],"modules":["Boarder Management Module"]}],"references":[{"url":"https://vuldb.com/vuln/394527","name":"VDB-394527 | code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/394527/cti","name":"VDB-394527 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-78144","name":"CVE-2026-78144 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/882425","name":"Submit #882425 | code-projects Barangay Resident Profiling Management System (BRPMS) / Barangay San Fabian 1.0 Insecure Direct Object Reference (IDOR)","tags":["third-party-advisory"]},{"url":"https://gist.github.com/c4ttr4ck/3601aa0ba9e567705823b6d425e84237","tags":["exploit"]},{"url":"https://code-projects.org/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-639","type":"CWE","lang":"en","description":"Authorization Bypass"}]},{"descriptions":[{"cweId":"CWE-285","type":"CWE","lang":"en","description":"Improper Authorization"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-23T22:30:09.529Z"},"timeline":[{"time":"2026-08-23T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-23T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-23T08:13:51.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"c4ttr4ck (VulDB User)","type":"reporter"}],"tags":["x_freeware"],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-26T18:07:47.289777Z","id":"CVE-2026-78144","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-26T18:07:57.713Z"}}]}}}