GeSHi vulnerable to Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2012-3522 · ADVISORY
• GeSHi/geshi-1.0 · PACKAGE
• lists.fedorahosted.org/archives/list/[email protected]/message/AE33KOZ42XXG6DSH5SNGOTC3NS7FWZ2I · WEB
• lists.fedorahosted.org/archives/list/[email protected]/message/H2R65LEAIDK6I53IYGZWDCRETBYKNUKF · WEB
• lists.fedorahosted.org/archives/list/[email protected]/message/JA5TA3T7AJXWM4QMI62LMGW62WZUULGB · WEB
• sourceforge.net/p/geshi/code/2508 · WEB
• openwall.com/lists/oss-security/2012/08/21/11 · WEB
• lists.fedoraproject.org/pipermail/package-announce/2013-May/105247.html
• lists.fedoraproject.org/pipermail/package-announce/2013-May/105273.html
• lists.fedoraproject.org/pipermail/package-announce/2013-May/105317.html
• sourceforge.net/p/geshi/code/2508 · Exploit

geshi/geshi のその他の脆弱性

• CVE-2025-2123中 6.1A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var …
• CVE-2012-3521中 5.0Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary …