CVE-2008-5185

Published: Nov 21, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<".

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

32377

vdb-entry

x_refsource_BID

geshi-xml-dos(46769)

vdb-entry

x_refsource_XF

http://geshi.svn.sourceforge.net/viewvc/geshi/trunk/geshi-1.0.X/src/geshi.php?r1=1321&r2=1322&view=patch

x_refsource_CONFIRM

[oss-security] 20081120 CVE id request: another geshi issue (was: [oss-security] GeSHi: Clarification about the recent security (non-)issues (SA32559))

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2008-5185

Description

Affected Products

References