CVE-2008-5185
GeSHi < 1.0.8 - Denial of Service via Unclosed XML Delimiter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-5185. PoCs published by Christian Hoffmann.
AI-analyzed exploit summary The provided text describes a remote denial-of-service vulnerability in GeSHi versions prior to 1.0.8, where an infinite loop can be triggered to consume excessive resources. However, no actual exploit code is included in the snippet.
Description
The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<".
Exploits (1)
The provided text describes a remote denial-of-service vulnerability in GeSHi versions prior to 1.0.8, where an infinite loop can be triggered to consume excessive resources. However, no actual exploit code is included in the snippet.