ByteOS Network

NVD Vulnerability Details :

CVE-2026-7093

Received

Source-cna@vuldb.com

Published At-27 Apr, 2026 | 07:16

Updated At-27 Apr, 2026 | 07:16

A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown functionality of the file /invoice/ of the component Invoice Endpoint. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.3	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Secondary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

Type: Secondary

Version: 4.0

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Type: Secondary

Version: 2.0

Base score: 6.5

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:P/A:P

Weaknesses

CWE ID	Type	Source
CWE-266	Primary	cna@vuldb.com
CWE-285	Primary	cna@vuldb.com

CWE ID: CWE-266

Type: Primary

Source: cna@vuldb.com

CWE ID: CWE-285

Type: Primary

Source: cna@vuldb.com

References

Hyperlink	Source	Resource
https://code-projects.org/	cna@vuldb.com	N/A
https://gist.github.com/higordiego/1d1a2b84768e4f80c673bd27be32c256	cna@vuldb.com	N/A
https://vuldb.com/submit/800389	cna@vuldb.com	N/A
https://vuldb.com/vuln/359668	cna@vuldb.com	N/A
https://vuldb.com/vuln/359668/cti	cna@vuldb.com	N/A