Tuesday, December 6, 2016

Roundcube 1.2.2: Command Execution via Email

https://blog.ripstech.com/2016/roundcube-command-execution-via-email/
Really bad security bug in previous versions of RoundCube email. Interesting dissection: