CVE-2008-5186

The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...

CVE-2008-5185

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service infinite loop via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using ""...

CVE-2008-5186

CVE-2008-5186 concerns the Generic Syntax Highlighter (GeSHi) set_language_path vulnerability in geshi.php. According to the records, inputs crafted to influence the default language path ($path) may allow remote administrators to perform file inclusion attacks in GeSHi versions before 1.0.8.1. T...

CVE-2008-5186

The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...

CVE-2008-5185

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service infinite loop via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using ""...

CVE-2008-5186: Improper Input Validation

The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...

PT-2008-6329 · Nigel Mcnie · Geshi

Name of the Vulnerable Software and Affected Versions: Generic Syntax Highlighter GeSHi versions prior to 1.0.8.1 Description: The set language path function in geshi.php might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $pa...

CVE-2008-5185: Undefined Security Weakness

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service infinite loop via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using ""...

GeSHi 1.0.x - XML Parsing Remote Denial of Service

GeSHi 1.0.x - XML Parsing Remote Denial of Service source: https://www.securityfocus.com/bid/32377/info GeSHi is prone to a remote denial-of-service vulnerability. Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop, consuming excessive resources...

GeSHi 1.0.x - XML Parsing Remote Denial of Service

source: https://www.securityfocus.com/bid/32377/info GeSHi is prone to a remote denial-of-service vulnerability. Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop, consuming excessive resources. This issue affects versions prior to GeSHi 1.0.8...

CVE-2005-3080

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set...

CVE-2005-3080

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set...

CVE-2005-3080

CVE-2005-3080 affects GeSHi prior to 1.0.7.3, where contrib/example.php can read arbitrary files via the language field when no source field is set. The underlying issue is a file read exposure through user-supplied language input, enabling potential disclosure of sensitive data. No exploits or i...

CVE-2005-3080: Undefined Security Weakness

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set...

GeSHi.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GeSHi Local PHP file inclusion 1.0.7.2 Author: Maksymilian Arciemowicz cXIb8O3 .17 Date: 21.9.2005 from SECURITYREASON.COM - --- 0.Description --- GeSHi started as a mod for the phpBB forum system, to enable highlighting of more languages than the...

[Full-disclosure] GeSHi Local PHP file inclusion 1.0.7.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GeSHi Local PHP file inclusion 1.0.7.2 Author: Maksymilian Arciemowicz cXIb8O3 .17 Date: 21.9.2005 from SECURITYREASON.COM - --- 0.Description --- GeSHi started as a mod for the phpBB forum system, to enable highlighting of more languages than the...