Sploitus

CVE-2020-1147

9 known exploits for CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

Affected products
.Net Framework, Alt Linux, Centos, Sharepoint Server, Red Hat, Visual Studio
Microsoft .net Core
= 2.1, 3.1
Fix
Available
CVSS 3.1
7.8 HIGH
EPSS
94.3% (100th percentile)
NVD status
Analyzed
Published
2020-07-14
CVE-2020-1147 at NVD
Authoritative description, scoring and affected products

9 known exploits for CVE-2020-1147

Proof-of-concept code and exploit modules indexed by Sploitus

Microsoft SharePoint Server 2019 - Remote Code Execution Exploit (2)
2021-07-23 PodaliriusZDTPython
Microsoft SharePoint Server 2019 - Remote Code Execution (2)
2021-07-23 PodaliriusEXPLOITDBPython
Microsoft SharePoint Server 2019 Remote Code Execution
2021-07-23 Soroush DaliliPACKETSTORMPython
Microsoft SharePoint Server 2019 - Remote Code Execution Exploit
2020-08-18 West ShepherdZDTPython
Microsoft SharePoint Server 2019 - Remote Code Execution
2020-08-17 West ShepherdEXPLOITDBPython
Microsoft SharePoint Server 2019 Remote Code Execution
2020-08-17 West ShepherdPACKETSTORMPython
SharePoint DataSet / DataTable Deserialization Exploit
2020-08-01 Soroush DaliliZDTRuby
SharePoint DataSet / DataTable Deserialization
2020-07-31 Soroush DaliliPACKETSTORMRuby
SharePoint DataSet / DataTable Deserialization
2020-07-14 Steven Seeley, Soroush Dalili, Spencer McIntyreMETASPLOITRuby