10 matches found
CVE-2012-3522
Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-3522
Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-3522
GeSHi contains an XSS vulnerability (CVE-2012-3522) in contrib/langwiz.php, affecting GeSHi prior to 1.0.8.11. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors due to insufficient input sanitization in the langwiz example script. Multiple sources (N...
Updated php-geshi package fix security vulnerabilities
A directory traversal and information disclosure local file inclusion flaws were found in the cssgen contrib module application to generate custom CSS files of GeSHi, a generic syntax highlighter, performed sanitization of 'geshi-path' and 'geshi-lang-path' HTTP GET / POST variables. A remote...
Fedora Update for php-geshi FEDORA-2013-5472
Check for the Version of php-geshi OpenVAS Vulnerability Test Fedora Update for php-geshi FEDORA-2013-5472 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Fedora Update for php-geshi FEDORA-2013-5472
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...
Fedora Update for php-geshi FEDORA-2013-5440
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 17 : php-geshi-1.0.8.11-3.fc17 (2013-5440)
Update to 1.0.8.11 : - Fix for CVE-2012-3521 : Remote directory traversal and information disclosure local file inclusion in the contrib module. - Fix for CVE-2012-3522 : Non-persistent XSS in langwiz contrib script. Note that Tenable Network Security has extracted the preceding description block...
Fedora 18 : php-geshi-1.0.8.11-3.fc18 (2013-5472)
Update to 1.0.8.11 : - Fix for CVE-2012-3521 : Remote directory traversal and information disclosure local file inclusion in the contrib module. - Fix for CVE-2012-3522 : Non-persistent XSS in langwiz contrib script. Note that Tenable Network Security has extracted the preceding description block...
Fedora 19 : php-geshi-1.0.8.11-3.fc19 (2013-5411)
Update to 1.0.8.11 : - Fix for CVE-2012-3521 : Remote directory traversal and information disclosure local file inclusion in the contrib module. - Fix for CVE-2012-3522 : Non-persistent XSS in langwiz contrib script. Note that Tenable Network Security has extracted the preceding description block...