CVE-2008-5185

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence…

published November 21, 2008

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03887 · 90.1th percentile
Published
2008-11-21T02:00Z
EPSS history
Timeline
  • 21 NOV 02:00Z
    The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence…
    cvelistv5