Critical Roundcube Webmail Vulnerability Let Attackers Inject SQL Queries
Source: Cybersecuritynews
Published:
<p>Roundcube Webmail users are being urged to apply urgent updates after developers patched multiple security flaws. Including a critical pre-authentication SQL injection vulnerability that could allow attackers to manipulate backend databases without logging in. The issues affect Roundcube versions