CVE-2024-4309

HubBank CVE-2024-4309 is a SQL injection in HubBank v1.0.2 affecting parameterized id values on endpoints /user/transaction.php?id=1, /user/credit-debit_transaction.php?id=1, /user/view_transaction.php?id=1, and /user/viewloantrans.php?id=1. Root cause: improper handling of user input leading to ...