PT-2025-31464 · Unknown · Intern Membership Management System

Xuanyuesanshi · Published 2025-07-31 · Updated 2025-07-31 · CVE-2025-8340

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Intern Membership Management System version 1.0

Description A flaw exists in the Error Message Handler component of the software, specifically within the fill details.php file. Manipulation of the email argument can lead to cross-site scripting (XSS). This issue can be exploited remotely. The exploit for this issue has been publicly disclosed.

Recommendations As a temporary workaround, consider sanitizing the email input to prevent the injection of malicious scripts. Restrict access to the fill details.php file to minimize the risk of exploitation.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2025-8340

Affected Products

Intern Membership Management System

References · 9

• 🔥 https://github.com/shenxianyuguitian/intern-mms-vuln-XSS/blob/main/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8340 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8340 · Vendor Advisory
• https://t.me/cveNotify/130342 · Telegram Post
• https://vuldb.com/?id.318292 · Note
• https://code-projects.org · Note
• https://vuldb.com/?ctiid.318292 · Note
• https://t.me/CVEtracker/28806 · Telegram Post
• https://vuldb.com/?submit.624681 · Note