Unrated severityNVD Advisory· Published Mar 30, 2009· Updated Jun 16, 2026
CVE-2009-1171
CVE-2009-1171
Description
The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a "$$" sequence, which causes LaTeX to include the contents of the file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
28cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*+ 27 more
- cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*
- (no CPE)range: 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, 1.9 before 1.9.5
Patches
Vulnerability mechanics
References
14- cvs.moodle.org/moodle/filter/tex/filter.phpnvdExploit
- lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlnvd
- secunia.com/advisories/34517nvd
- secunia.com/advisories/34557nvd
- secunia.com/advisories/34600nvd
- secunia.com/advisories/35570nvd
- tracker.moodle.org/browse/MDL-18552nvd
- www.debian.org/security/2009/dsa-1761nvd
- www.securityfocus.com/archive/1/502231/100/0/threadednvd
- www.securityfocus.com/bid/34278nvd
- usn.ubuntu.com/791-2/nvd
- www.exploit-db.com/exploits/8297nvd
- www.redhat.com/archives/fedora-package-announce/2009-April/msg00077.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2009-April/msg00079.htmlnvd
News mentions
0No linked articles in our index yet.