CVE-2008-5185

Published: Nov 21, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<".

Affected (31)

Products: Geshi: Geshi

Geshi

1 product

Geshi

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Geshi Geshi	Up to 1.0.7.22
Geshi Geshi	Version 1.0.0
Geshi Geshi	Version 1.0.1
Geshi Geshi	Version 1.0.2
Geshi Geshi	Version 1.0.2_beta_1
Geshi Geshi	Version 1.0.3
Geshi Geshi	Version 1.0.4
Geshi Geshi	Version 1.0.5
Geshi Geshi	Version 1.0.6
Geshi Geshi	Version 1.0.7.10
Geshi Geshi	Version 1.0.7.11
Geshi Geshi	Version 1.0.7.12
Geshi Geshi	Version 1.0.7.13
Geshi Geshi	Version 1.0.7.14
Geshi Geshi	Version 1.0.7.15
Geshi Geshi	Version 1.0.7.16
Geshi Geshi	Version 1.0.7.17
Geshi Geshi	Version 1.0.7.18
Geshi Geshi	Version 1.0.7.19
Geshi Geshi	Version 1.0.7.1
Geshi Geshi	Version 1.0.7.20
Geshi Geshi	Version 1.0.7.21
Geshi Geshi	Version 1.0.7.2
Geshi Geshi	Version 1.0.7.3
Geshi Geshi	Version 1.0.7.4
Geshi Geshi	Version 1.0.7.5
Geshi Geshi	Version 1.0.7.6
Geshi Geshi	Version 1.0.7.7
Geshi Geshi	Version 1.0.7.8
Geshi Geshi	Version 1.0.7.9
Geshi Geshi	Version 1.0.7