PT-2020-3630 · Roundcube +4 · Roundcube Webmail +4

🗓️ 09 Nov 2019 00:00:00Reported by Positive TechnologiesType

Roundcube Webmail suffers cross-site scripting from crafted hypertext emails; upgrade to fixed versions or disable graphics emails.

Reporter	Title	Published	Views	Family All 375
GithubExploit	Exploit for SQL Injection in Roundcube Webmail	14 Nov 202311:32	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Roundcube Webmail	13 Feb 202513:56	–	githubexploit
ATTACKERKB	CVE-2020-13965	9 Jun 202000:00	–	attackerkb
ATTACKERKB	CVE-2021-44026	19 Nov 202100:00	–	attackerkb
ATTACKERKB	CVE-2020-35730	28 Dec 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-12641	4 May 202000:00	–	attackerkb
ArchLinux	[ASA-202101-2] roundcubemail: cross-site scripting	4 Jan 202100:00	–	archlinux
Information Security Automation	Vulnerabilities of Western logistics	27 May 202523:55	–	avleonov
Information Security Automation	About Cross Site Scripting – MDaemon Email Server (CVE-2024-11182)	29 May 202521:46	–	avleonov
Circl	CVE-2020-12641	22 Jun 202318:10	–	circl

Source	Link
github	www.github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12641-Command%20Injection-Roundcube
github	www.github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-Roundcube
github	www.github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12640-PHP%20Local%20File%20Inclusion-Roundcube
github	www.github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12625-Cross%20Site-Scripting%20via%20Malicious%20HTML%20Attachment-Roundcube
github	www.github.com/pentesttoolscom/roundcube-cve-2021-44026
github	www.github.com/roundcube/roundcubemail/commit/3e8832d029b035e3fcfb4c75839567a9580b4f82
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2022-05555
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2020-03977

06 Mar 2024 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1 - 9.8

CVSS 27.5

EPSS0.93275