CVE-2015-1579: WordPress Slider Revolution - Local File Disclosure
HoneyLabs honeypots recorded 2 probes matching CVE-2015-1579 from 2 distinct source IP addresses in the last 7 days, of which 2 on interactive sensors. Severity is rated medium.
2 sources probed for CVE-2015-1579 on the interactive sensors, and all of them sent the exploit payload.
Request paths that identify it
- /blog/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php
- /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 45.156.87.28 | 1 | TechTies Inc. | The Netherlands |
| 87.58.199.133 | 1 | WebNX, Inc. | United States |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS18450 | WebNX, Inc. | 1 | 1 |
| AS197170 | TechTies Inc. | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| The Netherlands | 1 |
| United States | 1 |
Requests the interactive sensors answered
- GET /wp-admin/admin-ajax.php
HTTP client fingerprints
- b11cun020_00040010_724c10fb
CVE report
CVE report
Open a specific CVE from the CVE tracker.