Student Result Management System version 2.0 suffers from an insecure direct object reference vulnerability.