'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

infoleak_dircont:wadl_application_exposure（Rule ID：1040210005）

Release Date：2026/6/15

Rule Name：WADL Application Definition File Exposure

Severity：high

CVE ID：

 

Descripiton：

Sensitive information is a kind of information that is not known by the public and has actual or potential value. Loss, misuse or unauthorized access to sensitive information may do harm to individuals, enterprises and even the society. Web Application Description Language (WADL) is an XML-based machine-readable description of HTTP-based web applications. When the application.wadl file is exposed to untrusted users, attackers can obtain detailed information about RESTful web services, including resources, methods, request/response formats, and parameters. This information can be used to discover vulnerabilities or craft targeted attacks. This rule supports to defend the A2: Cryptgraphic Failures of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.