PT-2026-35360 · Code Projects · Invoice System In Laravel

C4Ttr4Ck · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7092

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-7092

Affected Products

Invoice System In Laravel

References · 6

• 🔥 https://gist.github.com/higordiego/9b5f076d7f651e45c0f30ae14bab3b4e · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7092 · Security Note
• https://vuldb.com/vuln/359667 · Note
• https://code-projects.org · Note
• https://vuldb.com/submit/800388 · Note
• https://vuldb.com/vuln/359667/cti · Note