Sploitus

CVE-2019-0604

30 known exploits for CVE-2019-0604

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Affected products
Sharepoint Server, Sharepoint Foundation
Microsoft Sharepoint Enterprise Server
= 2016
Microsoft Sharepoint Foundation
= 2013
Microsoft Sharepoint Server
= 2010, 2019
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
99.8% (100th percentile)
Weakness
CWE-20
NVD status
Analyzed
Published
2019-03-06
CVE-2019-0604 at NVD
Authoritative description, scoring and affected products

30 known exploits for CVE-2019-0604

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for CVE-2013-0422
2023-09-28 bxqteeGITEE
Exploit for Improper Input Validation in Microsoft
2021-04-22 Gh0st0neGITHUB
Exploit for CVE-2013-0422
2021-04-12 jiosenGITEE
Exploit for CVE-2013-0422
2020-12-22 gscsd5GITEE
Exploit for CVE-2013-0422
2020-12-20 B0b1994GITEE
Exploit for CVE-2013-0422
2020-12-04 王生-源GITEE
Exploit for CVE-2013-0422
2020-11-20 ahsh14GITEE
Exploit for CVE-2013-0422
2020-09-13 chenGITEE
Exploit for CVE-2013-0422
2020-08-24 lliioollcnGITEE
Exploit for CVE-2013-0422
2020-08-05 Henry_YangGITEE
Exploit for CVE-2013-0422
2020-07-26 niespandaGITEE
Exploit for CVE-2013-0422
2020-06-02 retnullyuGITEE
Exploit for Improper Input Validation in Microsoft
2020-03-28 疯子GITEE
Exploit for CVE-2013-0422
2020-03-11 朽木GITEE
Exploit for CVE-2013-0422
2020-03-04 ahuaGITEE
Microsoft SharePoint Picker.aspx deserialization vulnerability
2020-03-03 SAINT CorporationSAINT
Microsoft SharePoint Picker.aspx deserialization vulnerability
2020-03-03 SAINT CorporationSAINT
Microsoft SharePoint Picker.aspx deserialization vulnerability
2020-03-03 SAINT CorporationSAINT
Microsoft SharePoint - Deserialization Remote Code Execution Exploit
2020-02-11 VoulnetZDTPython
Microsoft SharePoint - Deserialization Remote Code Execution
2020-01-21 VoulnetEXPLOITDBPython
Exploit for Improper Input Validation in Microsoft
2020-01-10 VoulnetGITHUB
Exploit for CVE-2013-0422
2020-01-04 domaldGITEE
Exploit for CVE-2013-0422
2019-12-22 爱玲GITEE
Exploit for Improper Input Validation in Microsoft
2019-12-10 boxhgGITHUB
Exploit for Improper Input Validation in Microsoft
2019-10-27 CrossSongGITEE
Exploit for CVE-2013-0422
2019-10-27 CrossSongGITEE
Exploit for CVE-2013-0422
2019-10-26 RaduaGITEE
Exploit for CVE-2013-0422
2019-09-20 yeqingchen1GITEE
Exploit for Improper Input Validation in Microsoft
2019-09-15 m5050GITHUB
Exploit for Improper Input Validation in Microsoft
2019-06-26 k8gegeGITHUB