Geshi

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Geshi records in CISA KEV

No Geshi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Geshi 3 records LOW

Records

3 records

TI-2008-04937 CVE-2008-5186 · GHSA-rhpx-cf93-fp5q

The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before…

LOW 37

The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01971 Published 2008-11-21 No fix listed CWE-20

TI-2008-04936 CVE-2008-5185 · GHSA-mc42-h89m-gwgp

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers…

LOW 29

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as d…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03887 Published 2008-11-21 No fix listed CWE-399

TI-2005-02911 CVE-2005-3080 · GHSA-c87c-rr2w-6q25

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary…

LOW 25

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01212 Published 2005-09-27 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0