Approved changes feed: RSS · Atom
cpe:2.3:a:ofofonobs:hubbank:1.0.2:*:*:*:*:*:*:*part: a version: 1.0.2 update: *
| Vendor | Ofofonobs (2fef7bd7-cec7-54db-8d8f-7e97bfb501f4) |
|---|---|
| Product | Hubbank (0c0faede-942e-5a2b-9a40-bade42af8669) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4310 |
vulnerable | 2026-06-08 06:50:17.477888 |
Cross-site Scripting (XSS) vulnerability in HubBank
MEDIUM (6.3)
Cross-site Scripting (XSS) vulnerability in HubBank affecting version 1.0.2. This vulnerability allows an attacker to send a specially crafted JavaScript payload to registration and profile forms and trigger the payload when any authenticated user loads the page, resulting in a session takeover.
Published: 2024-04-29T12:35:48.526Z
Updated: 2024-08-01T20:33:53.174Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4309 |
vulnerable | 2026-06-08 06:50:17.477367 |
SQL injection vulnerability in HubBank
HIGH (8.1)
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/user/transaction.php?id=1, /user/credit-debit_transaction.php?id=1,/user/view_transaction. php?id=1 and /user/viewloantrans.php?id=1, id parameter) and retrieve the information stored in the database.
Published: 2024-04-29T12:28:01.751Z
Updated: 2024-08-01T20:33:53.109Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4308 |
vulnerable | 2026-06-08 06:50:17.476994 |
SQL injection vulnerability in HubBank
HIGH (8.1)
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/admin/view_users.php?id=1,/admin/viewloan-trans.php?id=1,/admin/view-deposit.php?id=1,/admin/view-domtrans.php?id=1, /admin/delete_cards.php?id=1,/admin/view_cards.php?id=1 and /admin/view_users.php?id=1, id parameter) and retrieve the information stored in the database.
Published: 2024-04-29T12:23:41.188Z
Updated: 2025-08-27T21:25:55.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4307 |
vulnerable | 2026-06-08 06:50:17.476588 |
SQL injection vulnerability in HubBank
HIGH (8.1)
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/accounts/activities.php?id=1, /accounts/view-deposit.php?id=1, /accounts/view_cards. php?id=1, /accounts/wire-transfer.php?id=1 and /accounts/wiretransfer-pending.php?id=1, id parameter) and retrieve the information stored in the database.
Published: 2024-04-29T12:25:38.606Z
Updated: 2024-08-01T20:33:53.193Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4306 |
vulnerable | 2026-06-08 06:50:17.474509 |
Unrestricted Upload of File with Dangerous Type vulnerability in HubBank
CRITICAL (9.9)
Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload malicious PHP files via upload document fields, resulting in webshell execution.
Published: 2024-04-29T11:56:36.434Z
Updated: 2024-08-01T20:33:53.247Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.