Approved changes feed: RSS · Atom
cpe:2.3:a:geshi:geshi:1.0.7.21:*:*:*:*:*:*:*part: a version: 1.0.7.21 update: *
| Vendor | Geshi (dd0bb6a2-68dc-55c2-875f-9cbba26c6aa3) |
|---|---|
| Product | Geshi (e706b53a-19b7-55b8-bd11-0cc50ba3c2e2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/php-geshi |
purl2cpe | 2026-06-01 10:12:42.160302 |
pkg:deb/ubuntu/php-geshi |
purl2cpe | 2026-06-01 10:12:42.160304 |
pkg:github/geshi/geshi-1.0 |
purl2cpe | 2026-06-01 10:12:42.160305 |
pkg:rpm/fedora/php-geshi |
purl2cpe | 2026-06-01 10:12:42.160306 |
pkg:rpm/opensuse/php-geshi |
purl2cpe | 2026-06-01 10:12:42.160308 |
pkg:sourceforge/geshi |
purl2cpe | 2026-06-01 10:12:42.160309 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-5186 |
vulnerable | 2026-06-08 04:50:50.066829 |
Details available
The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path ($path variable). NOTE: this issue has been disputed by a vendor, stating that only a static value is used, so this is not a vulnerability in GeSHi. Separate CVE identifiers would be created for web applications that integrate GeSHi in a way that allows control of the default language path
Published: 2008-11-21T02:00:00.000Z
Updated: 2024-08-07T10:40:17.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5185 |
vulnerable | 2026-06-08 04:50:50.065712 |
Details available
The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<".
Published: 2008-11-21T02:00:00.000Z
Updated: 2024-08-07T10:40:17.238Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.