Lucene search
+L

134 matches found

OSV
OSV
added 2008/11/21 2:30 a.m.10 views

CVE-2008-5185

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service infinite loop via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using ""...

6.5AI score
SaveExploits0References4
OSV
OSV
added 2008/11/21 2:30 a.m.6 views

DEBIAN-CVE-2008-5185

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service infinite loop via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using ""...

5CVSS6.8AI score0.03887EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2008/11/21 2:0 a.m.30 views

CVE-2008-5185

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service infinite loop via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using ""...

5CVSS6.3AI score0.03887EPSS
SaveExploits1
Cvelist
Cvelist
added 2008/11/21 2:0 a.m.28 views

CVE-2008-5185

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service infinite loop via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using ""...

6.6AI score0.03887EPSS
SaveExploits1References4
CVE
CVE
added 2008/11/21 2:0 a.m.68 views

CVE-2008-5186

CVE-2008-5186 concerns the Generic Syntax Highlighter (GeSHi) set_language_path vulnerability in geshi.php. According to the records, inputs crafted to influence the default language path ($path) may allow remote administrators to perform file inclusion attacks in GeSHi versions before 1.0.8.1. T...

7.5CVSS6.7AI score0.01971EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2008/11/21 2:0 a.m.45 views

CVE-2008-5186

The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...

7.5CVSS6.8AI score0.01971EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2008/11/21 12:0 a.m.11 views

PT-2008-6329 · Nigel Mcnie · Geshi

Name of the Vulnerable Software and Affected Versions: Generic Syntax Highlighter GeSHi versions prior to 1.0.8.1 Description: The set language path function in geshi.php might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $pa...

7.5CVSS7AI score0.01971EPSS
SaveExploits0References10
exploitpack
exploitpack
added 2008/11/20 12:0 a.m.14 views

GeSHi 1.0.x - XML Parsing Remote Denial of Service

GeSHi 1.0.x - XML Parsing Remote Denial of Service source: https://www.securityfocus.com/bid/32377/info GeSHi is prone to a remote denial-of-service vulnerability. Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop, consuming excessive resources...

1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/11/20 12:0 a.m.20 views

GeSHi 1.0.x - XML Parsing Remote Denial of Service

source: https://www.securityfocus.com/bid/32377/info GeSHi is prone to a remote denial-of-service vulnerability. Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop, consuming excessive resources. This issue affects versions prior to GeSHi 1.0.8...

5CVSS5.8AI score0.03887EPSS
SaveExploits1
NVD
NVD
added 2005/09/27 8:3 p.m.21 views

CVE-2005-3080

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set...

5CVSS6.7AI score0.01212EPSS
SaveExploits0References2
CVE
CVE
added 2005/09/27 4:0 a.m.48 views

CVE-2005-3080

CVE-2005-3080 affects GeSHi prior to 1.0.7.3, where contrib/example.php can read arbitrary files via the language field when no source field is set. The underlying issue is a file read exposure through user-supplied language input, enabling potential disclosure of sensitive data. No exploits or i...

5CVSS7.1AI score0.01212EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2005/09/27 4:0 a.m.33 views

CVE-2005-3080

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set...

6.7AI score0.01212EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2005/09/26 12:0 a.m.42 views

GeSHi.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GeSHi Local PHP file inclusion 1.0.7.2 Author: Maksymilian Arciemowicz cXIb8O3 .17 Date: 21.9.2005 from SECURITYREASON.COM - --- 0.Description --- GeSHi started as a mod for the phpBB forum system, to enable highlighting of more languages than the...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2005/09/26 12:0 a.m.32 views

[Full-disclosure] GeSHi Local PHP file inclusion 1.0.7.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GeSHi Local PHP file inclusion 1.0.7.2 Author: Maksymilian Arciemowicz cXIb8O3 .17 Date: 21.9.2005 from SECURITYREASON.COM - --- 0.Description --- GeSHi started as a mod for the phpBB forum system, to enable highlighting of more languages than the...

7AI score
SaveExploits0
Rows per page
Query Builder