Exploit for CVE-2019-0604

kitploit · 2026-08-26

Description

Microsoft SharePoint RCE vulnerability allowing remote code execution.

Entry point

ParameterPickerDialogType · query param

Path/_layouts/15/Picker.aspx

Microsoft SharePoint remote code execution via deserialization in Picker.aspx when processing application package markup

Affected software

Microsoft Sharepoint Enterprise Server= 2016

Microsoft Sharepoint Foundation= 2013

Microsoft Sharepoint Server= 2010, 2019

All known vulnerabilities by product

Sharepoint Server Sharepoint Foundation

CVSS 9.8 for CVE-2019-0604

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-08-30

CVE Information

Exploit Details

Modified:2026-08-26 21:41

Last Seen:2026-08-26 22:25

Reporter:KitPloit

Tags

Microsoft SharePointRemote Code ExecutionRCEvulnerability details

Other exploits for CVE-2019-0604

weaponized-0604

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

CVE-2019-0604_sharepoint_CVE

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

cve-2019-0604-SP2010-netv3.5

2026-08-25 KitPloitKITPLOIT

Exploit for CVE-2013-0422

2023-09-28 bxqteeGITEE

Exploit for Improper Input Validation in Microsoft

2021-04-22 Gh0st0neGITHUB

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-LINHLHQ-CVE-2019-0604
# CVE-2019-0604

CVE-2019-0604

De https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability