CVE-2024-4307

HIGH 8.1CVE-2024-4307 · Published 29/04/2024 · updated 17/06/2026

In short

CVE-2024-4307 is a HIGH (CVSS 8.1) vulnerability affecting hubbank (ofofonobsdev).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hubbank ofofonobsdev	`= 1.0.2`	No fix yet

Description

SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/accounts/activities.php?id=1, /accounts/view-deposit.php?id=1, /accounts/view_cards. php?id=1, /accounts/wire-transfer.php?id=1 and /accounts/wiretransfer-pending.php?id=1, id parameter) and retrieve the information stored in the database.

References

incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hubbank · Third Party Advisory

More vulnerabilities in hubbank

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

hubbank

ofofonobsdev

= 1.0.2

No fix yet

Description

More vulnerabilities in hubbank

See all →