Vulnerabilities

TI-2008-04937 CVE-2008-5186 · GHSA-rhpx-cf93-fp5q

The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before…

LOW 37

The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01971 Published 2008-11-21 No fix listed CWE-20

TI-2008-04936 CVE-2008-5185 · GHSA-mc42-h89m-gwgp

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers…

LOW 29

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as d…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03887 Published 2008-11-21 No fix listed CWE-399

TI-2005-02911 CVE-2005-3080 · GHSA-c87c-rr2w-6q25

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary…

LOW 25

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01212 Published 2005-09-27 No fix listed

Vulnerabilities

Filters

The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before…

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers…

contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary…