CVE-2024-4306 — Unrestricted Upload of File with Dangerous Type vulnerability in HubBank
Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload malicious PHP files via upload document…
Published: 2024-04-29 · CVSS: 9.9 · CVSS 3.1
Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload malicious PHP files via upload document fields, resulting in webshell execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7