Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

RULE（RULE ID：345219）

Rule General Information


Release Date:		2026-07-06

Rule Name:		Social Warfare Remote Code Execution Vulnerability (CVE-2019-9978)

Severity:

CVE ID:

Rule Protection Details


Description:		Social Warfare WordPress plugin <= 3.5.2 contains a remote code execution vulnerability in the settings import functionality. Unauthenticated attackers can exploit this vulnerability by manipulating the swp_debug and swp_url parameters to execute arbitrary code on the server.

Impact:		Unauthenticated attackers can execute arbitrary code on the server with the privileges of the web server process, potentially leading to complete system compromise, data theft, and further lateral movement within the network.

Affected OS:		Windows, Linux, Others

Reference:

Solutions

Please contact the software vendor to update the software patch.