Description
A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | Invoice System in Laravel | 1.0 | — |
References
- VDB-359709 | code-projects Invoice System in Laravel cross-site request forgery vdb-entry
- VDB-359709 | CTI Indicators (IOB, IOC) signature permissions-required
- Submit #800691 | code-projects Invoice System in Laravel 1.0 Cross-Site Request Forgery (CSRF) + Weak Session Handling third-party-advisory
- https://gist.github.com/higordiego/e25a1bb5cf93ffbda2e80b6cbc031a8b exploit
- https://code-projects.org/ product