Vulnerability · Published Jun 8, 2026 · Assigned by VulDB

CVE-2026-11515SourceCodester Barangay Resident Profiling and Information Management System Password Reset passsword_reset.php hard-coded password

Medium 5.3

In plain English

A medium-severity security flaw in Barangay Resident Profiling and Information Management System from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.3%top 79.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The impacted element is an unknown function of the file passsword_reset.php of the component Password Reset Handler. Such manipulation of the argument new_password with the input password123 leads to use of hard-coded password. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Barangay Resident Profiling and Information Management System	1.0

Weakness: CWE-259, CWE-255 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

References

VDB-369135 | SourceCodester Barangay Resident Profiling and Information Management System Password Reset passsword_reset.php hard-coded password vdb-entry, technical-description
VDB-369135 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-11515 | CVE Analysis and Report third-party-advisory
Submit #836238 | SourceCodester Barangay Resident Profiling and Information Management System (BRPMS) in PHP/MySQL 0 Unverified Password Change third-party-advisory
https://www.sourcecodester.com/ product