CVE-2012-3521

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. dot dot in the 1 geshi-path or 2 geshi-lang-path parameter...

CVE-2012-3521

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. dot dot in the 1 geshi-path or 2 geshi-lang-path parameter...

CVE-2012-3522

GeSHi contains an XSS vulnerability (CVE-2012-3522) in contrib/langwiz.php, affecting GeSHi prior to 1.0.8.11. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors due to insufficient input sanitization in the langwiz example script. Multiple sources (N...

CVE-2012-3522

Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3522

Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3521

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. dot dot in the 1 geshi-path or 2 geshi-lang-path parameter...

CVE-2012-3522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-2270

Name of the Vulnerable Software and Affected Versions GeSHi versions prior to 1.0.8.11 Description The issue concerns multiple directory traversal vulnerabilities in the cssgen contrib module. These vulnerabilities allow remote attackers to read arbitrary files by utilizing a .. dot dot in the...

CVE-2012-3521: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. dot dot in the 1 geshi-path or 2 geshi-lang-path parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2013-4305

Cross-site scripting XSS vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2013-4305

CVE-2013-4305 is a Cross-Site Scripting (XSS) vulnerability in the SyntaxHighlight GeSHi extension for MediaWiki, exposed via contrib/example.php. The root cause is improper sanitization of input to the example.php script, allowing an attacker to inject arbitrary script or HTML via PATH_INFO. Pub...

PT-2013-4948

Name of the Vulnerable Software and Affected Versions SyntaxHighlight GeSHi extension for MediaWiki versions prior to September 2013 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML...

CVE-2013-4305: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

MediaWiki < 1.19.8 / 1.20.7 / 1.21.2 Multiple Vulnerabilities

According to its version number, the instance of MediaWiki running on the remote host is affected by the following vulnerabilities : - The full installation path is disclosed in an error message when an invalid language is specified in the ResourceLoader. CVE-2013-4301 - Multiple cross-site reque...

Updated php-geshi package fix security vulnerabilities

A directory traversal and information disclosure local file inclusion flaws were found in the cssgen contrib module application to generate custom CSS files of GeSHi, a generic syntax highlighter, performed sanitization of 'geshi-path' and 'geshi-lang-path' HTTP GET / POST variables. A remote...

MGASA-2013-0163 Updated php-geshi package fix security vulnerabilities

A directory traversal and information disclosure local file inclusion flaws were found in the cssgen contrib module application to generate custom CSS files of GeSHi, a generic syntax highlighter, performed sanitization of 'geshi-path' and 'geshi-lang-path' HTTP GET / POST variables. A remote...

PT-2014-2271

Name of the Vulnerable Software and Affected Versions GeSHi versions prior to 1.0.8.11 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.0.8.11, update to version 1.0.8.11 or later to resolve the...

Fedora Update for php-geshi FEDORA-2013-5472

Check for the Version of php-geshi OpenVAS Vulnerability Test Fedora Update for php-geshi FEDORA-2013-5472 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for php-geshi FEDORA-2013-5440

Check for the Version of php-geshi OpenVAS Vulnerability Test Fedora Update for php-geshi FEDORA-2013-5440 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...