Description
The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to delete arbitrary courses by leveraging the teacher role.
Remediation
References
Related Vulnerabilities
WordPress Plugin Media Library Assistant Multiple Cross-Site Scripting Vulnerabilities (2.73)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3553)
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.14)
WordPress Plugin Wordpress Poll SQL Injection (36)
Joomla! Core Multiple Cross-Site Scripting Vulnerabilities (2.5.0 - 3.9.1)