CVE-2025-13200
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
In SourceCodester Farm Management System 1.0, there is a vulnerability exposing information through directory listing. A remote attacker can exploit this to browse directory contents.
Risk Assessment
The risk includes exposure of sensitive files and system data, which may facilitate further attacks.
Recommendation
Disable directory listing on the server and update the system to the latest version.
Other vulnerabilities in SourceCodester Farm Management System
See all- CVE-2025-12926Medium
A SQL injection vulnerability has been identified in SourceCodester Farm Management System 1.0 in the /review.php file via manipulation of the pid argument. The attack can be performed remotely, and the exploit has been publicly disclosed.
- CVE-2025-11487Medium
A SQL injection vulnerability was discovered in SourceCodester Farm Management System 1.0 in /uploadProduct.php. Manipulation of the Type argument allows remote attack execution. The exploit is publicly available.
- CVE-2025-11486Medium
A SQL injection vulnerability exists in SourceCodester Farm Management System 1.0 in /buyNow.php. Manipulation of the Name argument allows remote attack. The exploit is publicly available.
- CVE-2025-11478Medium
A SQL injection vulnerability was identified in SourceCodester Farm Management System 1.0 in the file /myCart.php. Manipulation of the pid argument leads to SQL injection, and remote exploitation is possible. The exploit has been made publicly available and could be exploited.
Original NVD description (English source)
A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation causes exposure of information through directory listing. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS