Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2012-5480
The Database activity module in Moodle 2.1.x before 2.1.9 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants39 entries via an advanced search.