'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

http_proto:http_method_allowed（Rule ID：1000010054）

Release Date：2025/9/15

Rule Name：Request Method Not Allowed

Severity：mid

CVE ID：

 

Descripiton：

HTTP is an application protocol for distributed, collabirative, hypermedia information systems. HTTP is the foundation of data communication for the World Wide Web.HTTP functions as a request-response protocol in the client-server cumputing model. This rule can detect the attack by checking standard HTTP method list. This rule supports to defend the A5: Security Misconfiguration of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.