There's a category in the OWASP Top 6, called: Insecure Design.

It is top 6 in their vulnerabilities ranking.

This is definitely insecure design.