SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/admin/view_users.php?id=1,/admin/viewloan-trans.php?id=1,/admin/view-deposit.php?id=1,/admin/view-domtrans.php?id=1, /admin/delete_cards.php?id=1,/admin/view_cards.php?id=1 and /admin/view_users.php?id=1, id parameter) and retrieve the information stored in the database.
References
| Link | Resource |
|---|---|
| https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hubbank | Third Party Advisory |
| https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hubbank | Third Party Advisory |
Configurations
History
23 Apr 2025, 16:36
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ofofonobsdev:hubbank:1.0.2:*:*:*:*:*:*:* | |
| First Time |
Ofofonobsdev
Ofofonobsdev hubbank |
|
| References | () https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hubbank - Third Party Advisory |
21 Nov 2024, 09:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hubbank - |
03 Jul 2024, 02:07
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
29 Apr 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-29 13:15
Updated : 2025-04-23 16:36
NVD link : CVE-2024-4308
Mitre link : CVE-2024-4308
CVE.ORG link : CVE-2024-4308
JSON object : View
Products Affected
ofofonobsdev
- hubbank
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')