Description
A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown functionality of the file /invoice/ of the component Invoice Endpoint. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | Invoice System in Laravel | 1.0 | — |
References
- VDB-359668 | code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization vdb-entry technical-description
- VDB-359668 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #800389 | code-projects Invoice System in Laravel 1.0 Invoice System in Laravel third-party-advisory
- https://gist.github.com/higordiego/1d1a2b84768e4f80c673bd27be32c256 exploit
- https://code-projects.org/ product