Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109576. PoCs published by USH.
AI-analyzed exploit summary This exploit demonstrates a Remote Code Execution (RCE) vulnerability in Moodle 1.9.3 via the `pathname` parameter in `texed.php`. The vulnerability arises due to lack of input validation on the `pathname` parameter, allowing command injection when `register_globals` is enabled and the 'TeX Notation' filter is active.
Description
Moodle 1.9.3 - Remote Code Execution
Exploits (1)
This exploit demonstrates a Remote Code Execution (RCE) vulnerability in Moodle 1.9.3 via the `pathname` parameter in `texed.php`. The vulnerability arises due to lack of input validation on the `pathname` parameter, allowing command injection when `register_globals` is enabled and the 'TeX Notation' filter is active.