Loading vulnerability details…
CVSS v3.1
N/A
EPSS
2.87%
Published
Jan 30, 2017
Modified
May 12, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.
Weaknesses (CWE)
Affected Products (1)
References (4)