CVE-2026-78142: code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization
A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archivedrecords.php of the component Restore/Delete. The manipulation of the argument residentid results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs low-level privileges and network access. No user interaction is required.
What action can be performed through the authorization bypass?
The issue affects the Restore/Delete functionality in /archived_records.php. Manipulating the resident_id argument can bypass authorization checks for archived records.
Is exploitation likely to be practical?
Yes. The attack complexity is rated low, and a public exploit has been disclosed.
Which version is identified as affected?
The vulnerability report identifies code-projects Barangay Resident Profiling Management System version 1.0.