CVE-2026-7093

code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization

CVSS 5.3 MEDIUMEPSS 0.2%CWE-266 CWE-285

A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown functionality of the file /invoice/ of the component Invoice Endpoint. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

code-projects · Invoice System in Laravel

public PoCs found — 1

cve_referencegist.github.com/higordiego/1d1a2b84768e4f80c673bd27be32c256unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://code-projects.org/https://gist.github.com/higordiego/1d1a2b84768e4f80c673bd27be32c256 https://vuldb.com/submit/800389 https://vuldb.com/vuln/359668 https://vuldb.com/vuln/359668/cti