'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:confluence_server_file_inclusion_vul（Rule ID：1070210214）

Release Date：2025/9/15

Rule Name：CVE-2019-3396: Atlassian Confluence Server file inclusion Vulnerability

Severity：critical

CVE ID：CVE-2019-3396

 

Descripiton：

Atlassian Confluence Server is a professional enterprise knowledge management and collaborative software of ATLASSIAN, Australia, or to build enterprise Wiki. ATLASSIAN Confluence Server exists security vulnerabilities. Remote attackers can use the vulnerability to perform code with the Widget Connector. The following versions are affected: ATLASSIAN Confluence Server 6.6.12 Previous versions, 6.7.0 to 6.12.3, previous versions of the 6.13.0 to 6.13.3, 6.14.0 to 6.14.2. This rule supports to defend the A6: Vulnerable and Outdated Components and A3: Injection of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.