Foxer131/CVE-2024-42008-9-exploit

PoC

The scripts in this repository are made to abuse CVE-2024-42008 and CVE-2024-42009. Both of these CVEs are vulnerabilities found on Roundcube 1.6.7

view exploit source poc_in_githubauthor Foxer131published 2025-05-26catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-42008US	critical9.3	34.2% (98th)	Exploit	2024-08-05
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a vict…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.