'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app: seeyon_oa_webmail.do_arbitrary_file_download_vul(Rule ID:1070210153)

Release Date2025/9/15

Rule NameCNVD-2020-62422: Seeyon OA webmail.do Arbitrary File Download Vulnerability

Severity:high

CVE ID

 

Descripiton

Seeyon OA is a collaborative management software developed by Beijing Seeyon Internet Software Co., Ltd., which builds a digital collaborative operation platform for medium and large-scale and group organizations. There is an arbitrary file reading vulnerability in the Seeyon OA system, which can be exploited by attackers to obtain sensitive information. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference:None

 

Solution

Update vendor patches.