Exploit for CVE-2019-0604

kitploit · 2026-08-26

Description

CVE-2019-0604 affects the tools component of a repository without a README.

Entry point

ParameterPickerDialogType · query param

Path/_layouts/15/Picker.aspx

Microsoft SharePoint remote code execution via deserialization in Picker.aspx when processing application package markup

Affected software

Microsoft Sharepoint Enterprise Server= 2016

Microsoft Sharepoint Foundation= 2013

Microsoft Sharepoint Server= 2010, 2019

All known vulnerabilities by product

Sharepoint Server Sharepoint Foundation

CVSS 9.8 for CVE-2019-0604

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-08-30

CVE Information

CVE-2019-0604

Exploit Details

Modified:2026-08-26 23:39

Last Seen:2026-08-27 00:34

Reporter:KitPloit

Other exploits for CVE-2019-0604

CVE-2019-0604

2026-08-29 KitPloitKITPLOIT

weaponized-0604

2026-08-29 KitPloitKITPLOIT

CVE-2019-0604

2026-08-29 KitPloitKITPLOIT

CVE-2019-0604_sharepoint_CVE

2026-08-26 KitPloitKITPLOIT

CVE-2019-0604

2026-08-26 KitPloitKITPLOIT

cve-2019-0604-SP2010-netv3.5

2026-08-25 KitPloitKITPLOIT

Exploit for CVE-2013-0422

2023-09-28 bxqteeGITEE

Exploit for Improper Input Validation in Microsoft

2021-04-22 Gh0st0neGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-M5050-CVE-2019-0604
Questo repository non contiene un README.

Exploit Code

Share

Share on social media: