Ravens PHP Scripts - GeSHi Unspecified Code Execution Vulnerability

SECUNIA ADVISORY ID: SA32559

VERIFY ADVISORY: http://secunia.com/advisories/32559/

CRITICAL: Moderately critical

IMPACT: System access

SOFTWARE: GeSHi 1.x: http://secunia.com/advisories/product/5752/

DESCRIPTION: A vulnerability has been reported in GeSHI, which can potentially be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an unspecified error, which may allow execution of arbitrary code on an affected system. The vulnerability is reported in versions prior to 1.0.8.1.

SOLUTION: Update to version 1.0.8.1.

PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.

ORIGINAL ADVISORY: http://sourceforge.net/project/shownotes.php?release_id=637321