Moodle is vulnerable to sanitization bypass. The library does not filter file names of submissions when multiple files are uploaded. This can allow a malicious user to bypass the sanitization checks.
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38885
lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html
openwall.com/lists/oss-security/2013/05/21/1
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38885
moodle.org/mod/forum/discuss.php?d=228935