I was a consultant for MIT and a student decided his final project would be to hack the custom LMS system we were working on. To our surprise, he figured out at least two ways before letting us know he was working on a final project. Gotta love MIT.