Description
backup/moodle2/restore_stepslib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not check for the moodle/course:changeidnumber privilege during handling of course ID numbers, which allows remote authenticated users to overwrite ID numbers via a restore action.
Remediation
References
Related Vulnerabilities
WordPress 4.0.x Arbitrary File Deletion Vulnerability (4.0 - 4.0.23)
WordPress Plugin 1 Flash Gallery Cross-Site Scripting and SQL Injection Vulnerabilities (0.2.5)
WordPress Plugin PDF & Print by BestWebSoft Cross-Site Scripting (1.9.3)
OpenSSL CVE-2014-3511 Vulnerability (CVE-2014-3511)
WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Download (1.0.5)