In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.
{ "binaries": [ { "binary_version": "3.0.3+dfsg-0ubuntu1", "binary_name": "moodle" } ] }