The popular learning-management system for teacher-student communication is rife with SQL-injection vulnerabilities.
Source: Threadpost