CVE-2017-17104: Fiyo CMS

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name'].

Affected products

• Fiyo Fiyo CMS: version 2.0.7 only

Published 2017-12-04. Last modified 2026-06-17.