joelp03/cve-2025-49113Python exploit for CVE-2025-49113, achieving remote code execution on Roundcube webmail via PHP object deserialization in file upload functionality.
A Python exploit for CVE-2025-49113, targeting a vulnerability in Roundcube webmail that allows remote code execution through PHP object deserialization.
This exploit leverages a deserialization vulnerability in Roundcube's file upload functionality. It uses a crafted GPG configuration payload to achieve remote code execution on the target server.
python exploit.py -t <target_url> -u <username> -p <password> -c <command>
-t, --target: Target Roundcube base URL (e.g., http://example.com/roundcube)-u, --user: Valid username for authentication-p, --password: Password for the specified user-c, --command: Shell command to execute on the target serverpython exploit.py -t http://target.com/roundcube -u [email] -p [password] -c "whoami"
The exploit targets the Crypt_GPG_Engine class deserialization vulnerability by:
This tool is for educational and authorized security testing purposes only. Only use this exploit on systems you own or have explicit permission to test. Unauthorized access to computer systems is illegal.
This code is provided for educational purposes. Use responsibly and in accordance with applicable laws and regulations.