Online Graduate Tracer System version 1.0.0 suffers from an insecure direct object reference vulnerability.