An 18-year-old security researcher uncovers severe vulnerabilities in popular school software, potentially exposing the data of over five million students and teachers.