CVE-2017-11630: Fiyo CMS

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

dapur\apps\app_config\controller\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request, a different vulnerability than CVE-2017-8853.

Affected products

• Fiyo Fiyo CMS: version 2.0.7 only

Published 2017-07-26. Last modified 2026-06-17.