PT-2026-35388 · Code Projects · Invoice System In Laravel

C4Ttr4Ck · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7109

NVD

CVSS v2.0

5.0

Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-7109

Affected Products

Invoice System In Laravel

References · 6

• 🔥 https://gist.github.com/higordiego/579622f7596354ade69e235b8e1cb88b · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7109 · Security Note
• https://vuldb.com/submit/800692 · Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/359710 · Note
• https://vuldb.com/vuln/359710/cti · Note