{"id":"CVE-2025-11079","state":"PUBLISHED","title":"Campcodes Farm Management System file information disclosure","description":"A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this issue is some unknown functionality. The manipulation results in file and directory information exposure. The attack may be performed from remote. The exploit has been released to the public and may be exploited.","publishedAt":"2025-09-27T21:02:07.130Z","updatedAt":"2025-09-29T19:35:15.914Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Campcodes Farm Management System"],"affected":[{"vendor":"Campcodes","product":"Farm Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.326119","https://vuldb.com/?ctiid.326119","https://vuldb.com/?submit.661199","https://github.com/unicorn33355/cve/issues/1","https://www.campcodes.com/"],"weaknesses":["CWE-538","CWE-200"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/11xxx/CVE-2025-11079.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-11079","state":"PUBLISHED","datePublished":"2025-09-27T21:02:07.130Z","dateUpdated":"2025-09-29T19:35:15.914Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-09-26T13:04:15.679Z"},"containers":{"cna":{"title":"Campcodes Farm Management System file information disclosure","descriptions":[{"lang":"en","value":"A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this issue is some unknown functionality. The manipulation results in file and directory information exposure. The attack may be performed from remote. The exploit has been released to the public and may be exploited."},{"lang":"de","value":"In Campcodes Farm Management System 1.0 ist eine Schwachstelle entdeckt worden. Dabei geht es um eine nicht genauer bekannte Funktion. Durch die Manipulation mit unbekannten Daten kann eine file and directory information exposure-Schwachstelle ausgenutzt werden. Der Angriff lässt sich über das Netzwerk starten. Die Ausnutzung wurde veröffentlicht und kann verwendet werden."}],"affected":[{"vendor":"Campcodes","product":"Farm Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.326119","name":"VDB-326119 | Campcodes Farm Management System file information disclosure","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.326119","name":"VDB-326119 | CTI Indicators (IOB, IOC, TTP)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.661199","name":"Submit #661199 | Campcodes Farm Management System v1.0 Directory traversal","tags":["third-party-advisory"]},{"url":"https://github.com/unicorn33355/cve/issues/1","tags":["exploit","issue-tracking"]},{"url":"https://www.campcodes.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-538","type":"CWE","lang":"en","description":"File and Directory Information Exposure"}]},{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"Information Disclosure"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-09-27T21:02:07.130Z"},"timeline":[{"time":"2025-09-26T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-09-26T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-09-26T15:09:19.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"unicorn33355 (VulDB User)","type":"reporter"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-29T19:35:06.433874Z","id":"CVE-2025-11079","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-29T19:35:15.914Z"}}]}}}