An Internet-facing system of the National Student Financial Aid Scheme (NSFAS) had a security flaw that, if exploited, would ...