Every CVESearch/Get API key

CVE-2015-5458

Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers...

6.8 Medium

Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions via the sess parameter.

Exploit likelihood

2.46%Up 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used6.8

Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions via the sess parameter.

Record
CVE-2015-5458
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions via the sess parameter.

Record
CVE-2015-5458
Updated
2026-11-02
EUVDEUVD-2015-5414No score

Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions via the sess parameter.

Record
EUVD-2015-5414
Updated
2026-11-03
GitHub AdvisoriesGHSA-587j-cc5w-pqphNo score

Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers...

Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions via the sess parameter.

Record
GHSA-587j-cc5w-pqph
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-5458 is a medium vulnerability (CVSS 6.8) in Pivotx, published July 8, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.46%, the 84th percentile. No source names a fixed version.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open