https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-4310.htmlhttps://patchthecve.com/cve/CVE-2024-4310.htmlWed, 17 Jun 2026 08:01:38 +0000MEDIUM 6.3: Cross-site Scripting (XSS) vulnerability in HubBank affecting version 1.0.2. This vulnerability allows an attacker to send a specially crafted JavaScript payload to registration and profile forms and trigger the payload when any authenticated user loads the page, resulting in a session takeover.https://patchthecve.com/cve/CVE-2024-4309.htmlhttps://patchthecve.com/cve/CVE-2024-4309.htmlWed, 17 Jun 2026 08:01:38 +0000HIGH 8.1: SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/user/transaction.php?id=1, /user/credit-debit_transaction.php?id=1,/user/view_transaction. php?id=1 and /usehttps://patchthecve.com/cve/CVE-2024-4308.htmlhttps://patchthecve.com/cve/CVE-2024-4308.htmlWed, 17 Jun 2026 08:01:38 +0000HIGH 8.1: SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/admin/view_users.php?id=1,/admin/viewloan-trans.php?id=1,/admin/view-deposit.php?id=1,/admin/view-domtrans.phhttps://patchthecve.com/cve/CVE-2024-4307.htmlhttps://patchthecve.com/cve/CVE-2024-4307.htmlWed, 17 Jun 2026 08:01:38 +0000HIGH 8.1: SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/accounts/activities.php?id=1, /accounts/view-deposit.php?id=1, /accounts/view_cards. php?id=1, /accounts/wirehttps://patchthecve.com/cve/CVE-2024-4306.htmlhttps://patchthecve.com/cve/CVE-2024-4306.htmlWed, 17 Jun 2026 08:01:38 +0000CRITICAL 9.9: Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload malicious PHP files via upload document fields, resulting in webshell execution.