Vulnerabilities > CVE-2015-5458 - Unspecified vulnerability in Pivotx

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
pivotx
NVD
Published: 2015-07-08
Updated: 2018-10-09

Summary

Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions via the sess parameter. <a href="http://cwe.mitre.org/data/definitions/384.html">CWE-384: Session Fixation</a>

Vulnerable Configurations

Part Description Count
Application
Pivotx
20

References