PT-2026-42983 · Sourcecodester · Indian Invoicing System

C4Ttr4Ck · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9412

Mitre

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Impacted is an unknown function of the component Backend Endpoint. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Multiple endpoints are affected.

Exploit

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2026-9412

Affected Products

Indian Invoicing System

References · 5

• 🔥 https://gist.github.com/c4ttr4ck/db84fc2af3e542acf1eab685264bcfc1 · Exploit
• https://vuldb.com/submit/813608 · Note
• https://vuldb.com/vuln/365393 · Note
• https://vuldb.com/vuln/365393/cti · Note
• https://sourcecodester.com · Note