3 matches found
CVE-2026-30707
An issue was discovered in SpeedExam Online Examination System SaaS after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key. The...
CVE-2026-30707
The SpeedExam Online Examination System (SaaS) (versions after v.FEV2026 ) is vulnerable to Broken Access Control within the ReviewAnswerDetails ASP.NET PageMethod . This flaw allows authenticated attackers to bypass client-side restrictions and directly invoke the method to retrieve the full ans...
PT-2026-25930
Name of the Vulnerable Software and Affected Versions SpeedExam Online Examination System SaaS versions after v.FEV2026 Description The software contains a Broken Access Control issue via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and...