PT-2026-35359 · Code Projects · Invoice System In Laravel

C4Ttr4Ck · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7091

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A flaw has been found in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /user of the component User Management Handler. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-7091

Affected Products

Invoice System In Laravel

References · 6

• 🔥 https://gist.github.com/higordiego/61e803a7a91df083665f2bcee9489c95 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7091 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/359666 · Note
• https://vuldb.com/submit/800387 · Note
• https://vuldb.com/vuln/359666/cti · Note