Lucene search
+L

5 matches found

OSV
OSV
•added 2022/05/17 4:42 a.m.•15 views

GHSA-FW3X-2PR2-5J64 GeSHi vulnerable to Directory Traversal

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. dot dot in the 1 geshi-path or 2 geshi-lang-path parameter...

8.7CVSS6.6AI score0.03174EPSS
SaveExploits1References8
OSV
OSV
•added 2014/06/13 2:55 p.m.•15 views

CVE-2012-3521

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. dot dot in the 1 geshi-path or 2 geshi-lang-path parameter...

6.6AI score
SaveExploits0References7
Mend
Mend
•added 2014/06/13 2:00 p.m.•1 views

CVE-2012-3521

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. dot dot in the 1 geshi-path or 2 geshi-lang-path parameter...

6.9CVSS0.03174EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2014/06/13 12:00 a.m.•2 views

PT-2014-2270

Name of the Vulnerable Software and Affected Versions GeSHi versions prior to 1.0.8.11 Description The issue concerns multiple directory traversal vulnerabilities in the cssgen contrib module. These vulnerabilities allow remote attackers to read arbitrary files by utilizing a .. dot dot in the...

8.7CVSS0.03174EPSS
SaveExploits1References16
Mageia
Mageia
•added 2013/06/06 12:24 p.m.•63 views

Updated php-geshi package fix security vulnerabilities

A directory traversal and information disclosure local file inclusion flaws were found in the cssgen contrib module application to generate custom CSS files of GeSHi, a generic syntax highlighter, performed sanitization of 'geshi-path' and 'geshi-lang-path' HTTP GET / POST variables. A remote...

4.3CVSS1.4AI score0.0163EPSS
SaveExploits1References1
Rows per page
Query Builder