corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0d8a7-1961-73aa-9a9d-b6b3e98db476

Roundcube XSS chained with cookie tossing for full inbox access

aikido.dev · published 21 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at aikido.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
17
Words captured
2,274

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.aikido.dev/attack/aipentest
aikido.dev
https://hackerone.com/reports/3594137
hackerone.com
https://github.com/roundcube/roundcubemail/blob/13fe3a616c6e451d2ab24a056c25ffd648bd02a1/program/actions/mail/get.php
github.com
https://github.com/roundcube/roundcubemail/blob/226811a1c974271dbedca72672923abaff8191c0/program/lib/Roundcube/rcube_uploads.php
github.com
https://github.com/roundcube/roundcubemail/blob/master/program/actions/mail/attachment_upload.php
github.com
Multiple XSS Vulnerabilities in Mailcow Read at the source ↗
aikido.dev
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie
developer.mozilla.org
https://github.blog/engineering/yummy-cookies-across-domains/
github.blog
https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie
developer.mozilla.org
https://github.com/roundcube/roundcubemail/releases/tag/1.6.14
github.com
https://github.com/roundcube/roundcubemail/releases/tag/1.5.14
github.com
https://app.aikido.dev/?_gl=1*11lkpus*_gcl_au*MTc3OTE5NTY0LjE3NzYzMjk2MzQ.
app.aikido.dev
https://www.aikido.dev/platform/attack
aikido.dev
https://github.com/roundcube/roundcubemail/commit/1b30edf5369668c92fe91dae3d52e477c808aa4f
github.com
https://github.com/roundcube/roundcubemail/blob/830ab574b38ea63f3c8f7a66b62343c8005bd7a0/program/lib/Roundcube/rcube_imap_generic.php
github.com
http://mail.target.tld/?_task=mail&_action=search&_interval=&_q=imap-inject-test&_headers=subject%2Cfrom&_layout=widescreen&_filter=ALL%0D%0AX007%20CREATE%20EvilFolder&_scope=base&_mbox=INBOX&_remote=1
mail.target.tld
https://github.com/roundcube/roundcubemail/commit/b18a8fa8e81571914c0ff55d4e20edb459c6952c
github.com