CVE-2019-0604 PoC — Microsoft SharePoint 输入验证错误漏洞

Source

https://github.com/likescam/CVE-2019-0604_sharepoint_CVE

Associated Vulnerability

Title:Microsoft SharePoint 输入验证错误漏洞 (CVE-2019-0604)
Description:A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Readme

# CVE-2019-0604
CVE-2019-0604

From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability

File Snapshot


 [4.0K]  /data/pocs/d6d657a405f133738e1efb041f5b23e7ddaf7b14
├── [4.0K]  ConsoleApplication1
│   ├── [4.0K]  ConsoleApplication1
│   │   ├── [ 189]  App.config
│   │   ├── [4.0K]  bin
│   │   │   └── [4.0K]  Debug
│   │   │       ├── [6.0K]  ConsoleApplication1.exe
│   │   │       ├── [ 189]  ConsoleApplication1.exe.config
│   │   │       ├── [ 12K]  ConsoleApplication1.pdb
│   │   │       ├── [ 22K]  ConsoleApplication1.vshost.exe
│   │   │       ├── [ 189]  ConsoleApplication1.vshost.exe.config
│   │   │       ├── [ 490]  ConsoleApplication1.vshost.exe.manifest
│   │   │       ├── [ 26M]  Microsoft.SharePoint.dll
│   │   │       ├── [5.4M]  Microsoft.SharePoint.xml
│   │   │       └── [2.0M]  PresentationFramework.dll
│   │   ├── [3.4K]  ConsoleApplication1.csproj
│   │   ├── [4.0K]  obj
│   │   │   └── [4.0K]  Debug
│   │   │       ├── [1.2K]  ConsoleApplication1.csproj.FileListAbsolute.txt
│   │   │       ├── [ 64K]  ConsoleApplication1.csprojResolveAssemblyReference.cache
│   │   │       ├── [6.0K]  ConsoleApplication1.exe
│   │   │       ├── [ 12K]  ConsoleApplication1.pdb
│   │   │       ├── [7.8K]  DesignTimeResolveAssemblyReferencesInput.cache
│   │   │       ├── [   0]  TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs
│   │   │       ├── [   0]  TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs
│   │   │       └── [   0]  TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs
│   │   ├── [ 149]  packages.config
│   │   ├── [7.1K]  Program.cs
│   │   └── [4.0K]  Properties
│   │       └── [1.3K]  AssemblyInfo.cs
│   ├── [1.0K]  ConsoleApplication1.sln
│   └── [4.0K]  packages
│       └── [4.0K]  PresentationFramework.4.6.0
│           ├── [4.0K]  lib
│           │   └── [2.0M]  PresentationFramework.dll
│           └── [672K]  PresentationFramework.4.6.0.nupkg
├── [ 139]  README.md
└── [ 574]  t.xml

10 directories, 27 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!