roundcube-webmail: Roundcube webmail

日期: 2025-09-01 | 影响软件: roundcube webmail | POC: 已公开

漏洞描述

Roundcube webmail was detected. shodan-query: http.component:"RoundCube"

PoC代码[已公开]

id: roundcube-webmail

info:
  name: Roundcube webmail
  author: ritikchaddha
  severity: info
  description: |-
    Roundcube webmail was detected.
    shodan-query: http.component:"RoundCube"
  tags: roundcube,portal,tech
  created: 2025/06/16

rules:
  r0:
    request:
      method: GET
      path: /webmail/
    expression: |
      response.status == 200 &&
      response.body.ibcontains(b'<title>Roundcube Webmail') &&
      response.body.bcontains(b'"rcversion":')
    extractors:
      - type: regex
        extractor:
          ext1: '"\"rcversion\":(?P<webmail>[0-9]{5}),".bsubmatch(response.body)'
          webmail: ext1["webmail"]
expression: r0()
来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/fingerprinting/roundcube-webmail.yaml

相关漏洞推荐