CVE-2025-68461 Scanner

A C++ security scanner tool to detect Cross-Site Scripting (XSS) vulnerabilities in Roundcube Webmail installations.

Impact

• Unauthorized access to user accounts
• Session hijacking
• Data exposure
• Unauthorized actions on behalf of users

Affected Versions

The scanner checks for the following vulnerable versions:

1.5.x Series:

• 1.5.0 through 1.5.11

1.6.x Series:

• 1.6.0 through 1.6.11

Mitigation

Upgrade to:

• Roundcube Webmail 1.5.12 or later (for 1.5.x)
• Roundcube Webmail 1.6.12 or later (for 1.6.x)

✨ Features

• Automated version detection from Roundcube Webmail instances
• Support for single URL scanning
• Batch scanning from file input
• Color-coded terminal output
• SSL/TLS support for HTTPS connections

🔧 Requirements

Dependencies

• C++17 compatible compiler (g++ or clang++)
• OpenSSL 3.x (for SSL/TLS support)
• Make (for building)

macOS Installation

# Install OpenSSL via Homebrew
brew install openssl@3

Linux Installation

# Ubuntu/Debian
sudo apt-get install libssl-dev g++ make

# Fedora/RHEL
sudo dnf install openssl-devel gcc-c++ make

🚀 Building

1. Clone or download this repository
2. Navigate to the project directory
3. Build the project:

make

Or rebuild from scratch:

make rebuild

Clean Build Artifacts

make clean

📖 Usage

Run the compiled binary:

./cve-2025-68461

Scanning Options

The tool provides two scanning modes:

1. Single URL - Scan a single Roundcube Webmail instance

   • Enter option 1
   • Provide the target URL (e.g., https://mail.example.com)

2. File Input - Batch scan multiple URLs from a file

   • Enter option 2
   • Provide the path to a file containing URLs (one per line)

Example

$ ./cve-2025-68461

[*] Scanning Options:
  1. URL
  2. File

Enter: 1
Enter URL: 
https://mail.example.com
[+] VULNERABLE: https://mail.example.com Version: 1.5.10

Input File Format

Create a text file (e.g., urls) with one URL per line:

https://mail.example.com
https://webmail.company.com
http://mail.test.local

🛠️ Technical Details

• Language: C++17
• HTTP Library: cpp-httplib (included)
• JSON Library: nlohmann/json (included)
• SSL/TLS: OpenSSL 3.x

The scanner:

1. Connects to the target Roundcube Webmail instance
2. Extracts version information from rcmail.set_env JavaScript configuration
3. Compares the detected version against known vulnerable versions
4. Reports vulnerable instances

⚠️ Disclaimer

This tool is for authorized security testing and educational purposes only. Only use this scanner on systems you own or have explicit permission to test. Unauthorized scanning of systems may be illegal and unethical.

👤 Author

c0d3Ninja

• Website: https://gotr00t0day.github.io
• Instagram: @gotr00t0day
• X (Twitter): @gotr00t0day

📄 License

This project is provided as-is for security research and educational purposes.

🔗 References

• CVE-2025-68461: Cross-Site Scripting vulnerability in Roundcube Webmail
• Roundcube Webmail