ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field as demonstrated using the id parameter to ApplicantDecision.asp.