NVD

Id
4970  
Name
CVE-2008-5186  
Description
** DISPUTED ** The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path ($path variable). NOTE: this issue has been disputed by a vendor, stating that only a static value is used, so this is not a vulnerability in GeSHi. Separate CVE identifiers would be created for web applications that integrate GeSHi in a way that allows control of the default language path.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-11-20  
Modified Date
2009-08-11  
Seq
2008-5186  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31143 4970 CVE-2008-5186 http://sourceforge.net/project/shownotes.php?release_id=637321  View
31144 4970 CVE-2008-5186 [oss-security] 20081110 GeSHi: Clarification about the recent security (non-)issues (SA32559)  View
31145 4970 CVE-2008-5186 32070  View
31146 4970 CVE-2008-5186 geshi-unspecified-code-execution(46271)  View

Related JVN