CVE-2014-9147 Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/.
HighCVSS 7.5
EPSS 11.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fiyo cms | <= 2.0.1.8 | No fix listed |
References
- packetstormsecurity.com exploit issue-tracking third-party-advisory vdb-entry
- 73437 third-party-advisory vdb-entry
- 36581 exploit issue-tracking third-party-advisory vdb-entry