CVE-2014-9147: Fiyo CMS

High severity, CVSS 7.5. EPSS: 11.4% chance of exploitation in the next 30 days.

Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/.

Affected products

• Fiyo Fiyo CMS: up to and including 2.0.1.8

Published 2017-10-16. Last modified 2026-06-17.