CVE-2024-4307

SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/accounts/activities.php?id=1, /accounts/view-deposit.php?id=1, /accounts/view_cards. php?id=1, /accounts/wire-transfer.php?id=1 and /accounts/wiretransfer-pending.php?id=1, id parameter) and retrieve the information stored in the database.

• CWE-89

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hubbankThird Party Advisory
• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hubbankThird Party Advisory

Published

Apr 29, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-43062Memory corruption caused by missing locks and checks on the …7.8
• CVE-2024-43063information disclosure while invoking the mailbox read API.5.5
• CVE-2024-43064Uncontrolled resource consumption when a driver, an applicat…4.7
• CVE-2024-43065Cryptographic issues while generating an asymmetric key pair…7.1
• CVE-2024-43066Memory corruption while handling file descriptor during list…7.8
• CVE-2024-43067Memory corruption occurs during the copying of read data fro…7.8
• CVE-2024-43077In DevmemValidateFlags of devicemem_server.c , there is a po…7.8
• CVE-2024-4308SQL injection vulnerability in HubBank affecting version 1.0…8.1
• CVE-2024-43080In onReceive of AppRestrictionsFragment.java, there is a pos…7.8
• CVE-2024-43081In installExistingPackageAsUser of InstallPackageHelper.java…7.8
• CVE-2024-43082In onActivityResult of EditUserPhotoController.java, there i…5.5
• CVE-2024-43083In validate of WifiConfigurationUtil.java , there is a possi…5.5