Skuul School Management System versions up to 2.6.5 contain an access control vulnerability in the ResultChecker::checkResult method. Authenticated students can manipulate the studentId parameter to access other students' examination results without authorization.