CVE-2025-13200 SourceCodester Farm Management System exposure of information through directory listing
Remote attackers can access sensitive files via directory listing in SourceCodester Farm Management System, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-13200?
CVE-2025-13200 is a medium-severity vulnerability in SourceCodester Farm Management System, published on 15 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation causes exposure of information through directory listing. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Which versions are affected by CVE-2025-13200?
It affects 1 product.
Products include Janobe Farm Management System.
How do I fix CVE-2025-13200?
No fix has been published for CVE-2025-13200 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-13200 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-13200 exists.
Other vulnerabilities in SourceCodester Farm Management System
- CVE-2025-12926 SourceCodester Farm Management System review.php sql injection
- CVE-2025-11478 SourceCodester Farm Management System myCart.php sql injection
- CVE-2025-11486 SourceCodester Farm Management System buyNow.php sql injection
- CVE-2025-11487 SourceCodester Farm Management System uploadProduct.php sql injection
Sources
Also known as GHSA-v78c-9crg-6v9m.