PivotX 2.3.10 Session Fixation / XSS / Code Execution

Vulnerability: Session Fixation, Reflected XSS, Code Execution Affected Software: PivotX http://pivotx.net/ Affected Version: 2.3.10 probably also prior versions Patched Version: 2.3.11 Risk: Medium-High Session Fixation ================ Risk ---- Medium; If victim clicks link and logs in, then a...

CVE-2015-3224

creationtimestamp| type| source ---|---|--- 2015-06-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41689 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/railswebconsolev2codeexec.rb 2025-02-06 03:13:42+00:0...

CVE-2015-3315

creationtimestamp| type| source ---|---|--- 2015-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36747 2018-02-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44097 2018-05-29 15:50:33+00:00| seen|...

CVE-2014-5308

creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34863...

CVE-2014-7187

creationtimestamp| type| source ---|---|--- 2014-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36933 2023-12-18 16:17:07+00:00| seen| https://t.me/arpsyndicate/2021 2025-02-12 05:35:02+00:00| exploited| https://gist.github.com/S1131/5d8917283842e71d7d693ebeb63a7f89...

CVE-2014-7186

creationtimestamp| type| source ---|---|--- 2014-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36933 2026-08-02 14:23:32+00:00| exploited| https://t.me/hackersmeet0/1211 2026-08-03 02:07:05+00:00| exploited| https://t.me/hackersmeet0/1211...

CVE-2014-5101

creationtimestamp| type| source ---|---|--- 2014-07-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39249...

CVE-2014-4944

creationtimestamp| type| source ---|---|--- 2014-07-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39240...

CVE-2014-0007

creationtimestamp| type| source ---|---|--- 2014-06-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39222...

CVE-2014-4938

creationtimestamp| type| source ---|---|--- 2014-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39252...

CVE-2014-3854

creationtimestamp| type| source ---|---|--- 2014-05-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39199...

CVE-2014-3749

creationtimestamp| type| source ---|---|--- 2014-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39187...

CVE-2014-1849

creationtimestamp| type| source ---|---|--- 2014-05-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39195...

CVE-2014-0346

creationtimestamp| type| source ---|---|--- 2014-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32745 2014-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32764 2014-04-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32791 2014-04-24...

CVE-2013-7097

creationtimestamp| type| source ---|---|--- 2013-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38873...

CVE-2013-5912

creationtimestamp| type| source ---|---|--- 2013-11-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38850...

CVE-2013-4034

creationtimestamp| type| source ---|---|--- 2013-10-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38825...

CVE-2013-3144

creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187...

CVE-2013-3803

creationtimestamp| type| source ---|---|--- 2013-08-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27291...

CVE-2013-4625

creationtimestamp| type| source ---|---|--- 2013-07-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38676...