CVE-2025-49113-PoC — Post-authentication remote code execution proof-of-concept for CVE-2025-49113 in Roundcube webmail. Includes a vulnerable Docker environment and Python scanner for testing command injection. | Kitploit

🚀 How to launch the project

1. Starting the vulnerable server

cd Stand
docker-compose up -d

2. Running the script against the target

cd PoC/src
python3 scanner.py --target http://localhost:9000 --username test --password test --command "id"

📌 Key Requirements

Authentication required (Post-Auth)
Credentials: test / test
Target URL: http://localhost:9000

Download Tool

CVE-2025-49113-PoC

Most Popular

CVE-2025-49113 Roundcube RCE PoC

🚀 How to launch the project

1. Starting the vulnerable server

2. Running the script against the target

📌 Key Requirements