Any Rule for This?

[brijendrasial]

http://blog.sucuri.net/2014/09/slider-revolution-plugin-critical-vulnerability-being-exploited.html

[TDmitry]

Will be covered with next update.

[Hedloff]

No rule was created for the slider hack?

[brijendrasial]

Not till now..

[Hedloff]

Strange.....Since Fortinet got this pretty fast and also Sucuri has this in their WAF.
Why cannot Comodo get a rule to stop this?

Hope they can get rules out asap when there is hugh hackings like this in the future! 

[TDmitry]

Strange.....Since Fortinet got this pretty fast and also Sucuri has this in their WAF.
Why cannot Comodo get a rule to stop this?

Hope they can get rules out asap when there is hugh hackings like this in the future! 

Will be fixed with next update (29.01.2015)

[xanubi]

Still there isn't protection against this, unfortunately.

[Hedloff]

Revslider protection should be added. I have seen this on our servers for a while now.....

[TDmitry]

Still there isn't protection against this, unfortunately.

Rule 222050 must fix this. Make sure it is enabled.

[xanubi]

Hello, it's enabled, and still the exploit is on the wild.

I think you should see this hacking script, that exploits all the possibilities that revslider have, there are a couple of variants, unfortunately.

1st

Code: [Select]

http://www.exploit4arab.net/exploits/1405
2nd

Code: [Select]

http://packetstormsecurity.com/files/131246/WordPress-Revolution-Slider-File-Upload.html

[TDmitry]

It looks like for a various vulnerabilities in this plugin. We will check it.