first thing they should have pulled up is the engineers at CRIS who designed this system leaving gaps for people like him to exploit.
Small bugs are one thing, this isn't and when someone no real experience in these type of systems is able to work his way through it speaks volumes of how well they designed the booking system.