Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

RULE（RULE ID：345198）

Rule General Information


Release Date:		2026-07-08

Rule Name:		SQL Injection Detection - Blind Inject

Severity:

CVE ID:

Rule Protection Details


Description:		This rule is designed to detect Blind SQL Injection attacks against backend databases. Attackers construct specific SQL logical conditions and observe changes in the application's response time or Boolean state (True/False) to exfiltrate data indirectly. This rule identifies and blocks malicious traffic by matching signatures of specific SQL functions (such as SLEEP(), BENCHMARK(), WAIT FOR DELAY) or logical comparison operators (such as AND 1=1, OR 1=2) within HTTP requests.

Impact:		An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.

Affected OS:		Windows, Linux, Others

Reference:

Solutions

1. Filter and escape the data entered by the user to ensure that the input does not contain malicious SQL code. Use parameterized queries or precompiled statements to avoid concatenating user input directly into SQL statements. 3. Make sure that the application connects to the database with the principle of least privilege, and avoid using the database account with too high privilege to perform unnecessary operations.