qbnz GeSHi 1.0.8.8

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:qbnz:geshi:1.0.8.8:*:*:*:*:*:*:*

part: a version: 1.0.8.8 update: *

VendorQbnz (19e21e7b-4abb-521c-b9e1-b6c99d3dfa2c)
ProductGeshi (9df7b167-7ea3-5a91-9f16-33d797fbc545)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/php-geshi purl2cpe 2026-06-01 10:14:06.900494
pkg:deb/ubuntu/php-geshi purl2cpe 2026-06-01 10:14:06.900496
pkg:github/geshi/geshi-1.0 purl2cpe 2026-06-01 10:14:06.900497
pkg:rpm/fedora/php-geshi purl2cpe 2026-06-01 10:14:06.900498
pkg:rpm/opensuse/php-geshi purl2cpe 2026-06-01 10:14:06.900499
pkg:sourceforge/geshi purl2cpe 2026-06-01 10:14:06.900501

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3522 vulnerable 2026-06-08 05:02:10.478031 Details available
Cross-site scripting (XSS) vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-06-13T14:00:00.000Z
Updated: 2024-08-06T20:05:12.752Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3521 vulnerable 2026-06-08 05:02:10.476965 Details available
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
Published: 2014-06-13T14:00:00.000Z
Updated: 2024-08-06T20:05:12.782Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.