what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from stonepresto

Roundcube TimeZone Authenticated File Disclosure

Posted Aug 31, 2024

Authored by stonepresto, Joel From Ndepthsecurity, thomascube | Site metasploit.com

Roundcube Webmail allows unauthorized access to arbitrary files on the hosts filesystem, including configuration files. This affects all versions from 1.1.0 through version 1.3.2. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. Tested against version 1.3.2.

tags | exploit, arbitrary

advisories | CVE-2017-16651

SHA-256 | 30dc475bf43282bac1e99e21e703821abb68a948837e1f171f2089ec7b6e01b0

Download | Favorite | View

Roundcube Webmail 1.2 File Disclosure

Posted Feb 1, 2021

Authored by stonepresto

Roundcube Webmail version 1.2 suffers from a file disclosure vulnerability.

tags | exploit, info disclosure

advisories | CVE-2017-16651

SHA-256 | 3ea9d4b9d2c7673808c4851506092371bb0861ff694274c0cd863aa7631d642e

Download | Favorite | View