t0kx/exploit-CVE-2016-9920

PoC

Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container

view exploit source poc_in_githubauthor t0kxpublished 2017-01-06catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-9920US	high7.5	5.60% (93rd)	Exploit	2016-12-08
steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.