PT-2026-35361 · Code Projects · Invoice System In Laravel

C4Ttr4Ck · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7093

Mitre

CVSS v3.1

6.3

Medium

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown functionality of the file /invoice/ of the component Invoice Endpoint. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-7093

Affected Products

Invoice System In Laravel

References · 6

• 🔥 https://gist.github.com/higordiego/1d1a2b84768e4f80c673bd27be32c256 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7093 · Security Note
• https://vuldb.com/submit/800389 · Note
• https://vuldb.com/vuln/359668/cti · Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/359668 · Note