{"id":"CVE-2025-13200","aliases":["EUVD-2025-197702","GHSA-v78c-9crg-6v9m"],"status":"published","title":"SourceCodester Farm Management System exposure of information through directory listing","description":"A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation causes exposure of information through directory listing. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00488,"percentile":0.42354,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-548","CWE-552"],"published":"2025-11-15T15:32:05Z","modified":"2026-10-07T21:10:00Z","products":[{"vendor":"janobe","product":"farm_management_system"},{"vendor":"sourcecodester","product":"farm management system"}],"references":[{"url":"https://vuldb.com/?id.332498","tags":["vdb-entry","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.332498","tags":["signature","permissions-required","Permissions Required","VDB Entry"]},{"url":"https://vuldb.com/?submit.685615","tags":["third-party-advisory","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/Shaker-Chen/cve/issues/1","tags":["exploit","issue-tracking","Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://www.sourcecodester.com/","tags":["product","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13200"},{"url":"https://www.sourcecodester.com"},{"url":"https://github.com/advisories/GHSA-v78c-9crg-6v9m"}],"sources":{"cve":[{"id":"CVE-2025-13200","title":"SourceCodester Farm Management System exposure of information through directory listing","description":"A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation causes exposure of information through directory listing. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.","status":"published","published":"2025-11-15T15:32:05.861Z","modified":"2025-11-17T14:48:58.059Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","level":"medium","assessor":"cna"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","level":"medium","assessor":"cna"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR","assessor":"cna"}],"cwes":["CWE-548","CWE-552"],"updated_at":"2026-11-02T14:32:43.10004Z"}],"euvd":[{"id":"EUVD-2025-197702","description":"A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation causes exposure of information through directory listing. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.","status":"published","published":"2025-11-15T15:32:05Z","modified":"2025-11-17T14:48:58Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","level":"medium"}],"updated_at":"2026-11-02T19:49:16.584357Z"}],"ghsa":[{"id":"GHSA-v78c-9crg-6v9m","title":"A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this...","description":"A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation causes exposure of information through directory listing. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.","status":"published","published":"2025-11-15T18:30:26Z","modified":"2025-11-15T18:30:26Z","cvss":[{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-548"],"updated_at":"2026-11-02T15:04:49.684595Z"}],"nvd":[{"id":"CVE-2025-13200","description":"A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation causes exposure of information through directory listing. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.","status":"published","published":"2025-11-15T16:15:43.147Z","modified":"2026-10-07T21:10:00.2Z","cvss":[{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-548","CWE-552"],"updated_at":"2026-11-02T14:11:44.669367Z"}]}}