Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<".
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GeSHi XML Parsing 'geshi.php'远程拒绝服务漏洞
Vulnerability Description
GeSHi是用php编写的通用语法荧光笔,是一个编程辅助工具,支持PHP、HTML、C等语言。 GeSHi 1.0.8之前的版本中的geshi.php的加强功能,允许远程攻击者借助包含一个只有开放的分隔符没有关闭的分隔符的一个XML序列,引起拒绝服务 (无限循环), 例如使用"<"。
CVSS Information
N/A
Vulnerability Type
N/A