PT-2025-31464 · Unknown · Intern Membership Management System

Xuanyuesanshi

·

Published

2025-07-31

·

Updated

2025-07-31

·

CVE-2025-8340

CVSS v2.0
5.0
VectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions:

Intern Membership Management System version 1.0

Description:

A flaw exists in the Error Message Handler component of the software, specifically within the `fill details.php` file. Manipulation of the `email` argument can lead to cross-site scripting (XSS). This issue can be exploited remotely. The exploit for this issue has been publicly disclosed.

Recommendations:

As a temporary workaround, consider sanitizing the `email` input to prevent the injection of malicious scripts.

Restrict access to the `fill details.php` file to minimize the risk of exploitation.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

Related Identifiers

CVE-2025-8340

Affected Products

Intern Membership Management System