A vulnerability was found in code-projects Invoice System in Laravel 1.0. It has been classified as critical. The impacted element is an unknown function of the file /company. This manipulation of the argument logo causes unrestricted upload.
This vulnerability is tracked as CVE-2026-7107. The attack is possible to be carried out remotely. Moreover, an exploit is present.
