CVE-2019-0604 SharePoint unauthenticated RCE redux

[Robbie Wiggins 3]

Any one got a way to fingerprint a vuln site loads error out when hitting the right endpoint and one or two are blank.

 

Sorry, something went wrong
Could not load type 'Microsoft.SharePoint.Portal.WebControls.ItemPickerDialog' from assembly 'Microsoft.SharePoint, Version=15.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c'.
Technical Details

Any one able to confirm?

 

Endpoint to hit should be 

/_layouts/15/picker.aspx?PickerDialogType=Microsoft.SharePoint.Portal.WebControls.ItemPickerDialog

 

Edited December 19, 2019 by Robbie Wiggins