ShinHer StudyOnline System is a school administration system from ShinHer, China. " feature is not controlled by permissions. An attacker could use this vulnerability to access other usersβ message board content by setting URL parameters after logging in with user privileges.