Moodle Improper Access Control Vulnerability - CVE-2016-3733
The quotrestore teacherquot feature in Moodle 3.0 through 3.0.3 2.9 through 2.9.5 2.8 through 2.8.11 2.7 through 2.7.13 and earlier allows remote authenticated users to overwrite the course idnumber.