karvarzi.mcls.gov.ir

this site is belong to Iran government and has above 3 million registered user!
the users must upload a photo of their national card and educational license. but there is not any protection for unwanted and unauthorized access to this documents. And with a simple script anyone can access all of this information and documents!
a national card sample:
https://karvarzi.mcls.gov.ir/Forms/uploadk/KF_791822_cardMelli.jpg
a educational license sample:
https://karvarzi.mcls.gov.ir/Forms/uploadk/KF_791822_madrak.jpg


this bug is reported to ICT Minister of Iran (MJ Azari Jahromi), i hope he read this and fix it