CVE-2024-3415

A vulnerability was found in SourceCodester Human Resource Information System 1.0. It has been classified as problematic. Affected is an unknown function of the file Superadmin_Dashboard/process/addbranches_process.php. The manipulation of the argument branches_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259584.

• CWE-79

• https://github.com/thisissuperann/Vul/blob/Human-Resource-Information-System/Human-Resource-Information-System-03.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259584Permissions Required, VDB Entry
• https://vuldb.com/?id.259584Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.311442Third Party Advisory, VDB Entry
• https://github.com/thisissuperann/Vul/blob/Human-Resource-Information-System/Human-Resource-Information-System-03.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.259584Permissions Required, VDB Entry
• https://vuldb.com/?id.259584Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.311442Third Party Advisory, VDB Entry

Published

Apr 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34144A sandbox bypass vulnerability involving crafted constructor…9.8
• CVE-2024-34145A sandbox bypass vulnerability involving sandbox-defined cla…8.8
• CVE-2024-34146Jenkins Git server Plugin 114.v068a_c7cc2574 and earlier doe…6.5
• CVE-2024-34147Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Tel…4.3
• CVE-2024-34148Jenkins Subversion Partial Release Manager Plugin 1.0.1 and …6.8
• CVE-2024-34149In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.k…6.3
• CVE-2024-34152Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x…4.3
• CVE-2024-34153Uncontrolled search path element in Intel(R) RAID Web Consol…7.8
• CVE-2024-34154Rejected reason: reserved but not needed
• CVE-2024-34155Calling any of the Parse functions on Go source code which c…4.3
• CVE-2024-34156Calling Decoder.Decode on a message which contains deeply ne…7.5
• CVE-2024-34157Rejected reason: reserved but not needed