CVE-2008-5185

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<".

• geshi geshi (<= 1.0.7.22) • geshi geshi 1.0.0 • geshi geshi 1.0.1 • geshi geshi 1.0.2 • geshi geshi 1.0.2 beta 1 • geshi geshi 1.0.3 • geshi geshi 1.0.4 • geshi geshi 1.0.5 • geshi geshi 1.0.6 • geshi geshi 1.0.7 • geshi geshi 1.0.7.1 • geshi geshi 1.0.7.2 • geshi geshi 1.0.7.3 • geshi geshi 1.0.7.4 • geshi geshi 1.0.7.5 • geshi geshi 1.0.7.6 • geshi geshi 1.0.7.7 • geshi geshi 1.0.7.8 • geshi geshi 1.0.7.9 • geshi geshi 1.0.7.10 • geshi geshi 1.0.7.11 • geshi geshi 1.0.7.12 • geshi geshi 1.0.7.13 • geshi geshi 1.0.7.14 • geshi geshi 1.0.7.15 • geshi geshi 1.0.7.16 • geshi geshi 1.0.7.17 • geshi geshi 1.0.7.18 • geshi geshi 1.0.7.19 • geshi geshi 1.0.7.20 • geshi geshi 1.0.7.21