RULE(RULE ID:338790)

Rule General Information
Release Date: 2025-04-08
Rule Name: Huhui API ServicePage.aspx Arbitrary File Read Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Sichuan Huhui Software is a high-tech enterprise specializing in medical information research and development for more than 30 years. In the process of rapid growth, the company has established a market action system and customer guarantee mechanism, and formed a technical and business service system that combines software development, design consulting, application integration and providing comprehensive solutions in the industry. The ServicePage. aspx interface may contain arbitrary file reading vulnerabilities. Unauthorized attackers may be able to epage important system files, such as database configuration files, system configuration files, and database configuration files.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.