'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app: ruoyi_system_file_access（Rule ID：1070210265）

Release Date：2025/9/15

Rule Name：Ruoyi System Arbitrary File Access Vulnerability

Severity：critical

CVE ID：

 

Descripiton：

RuoYi is a fast development platform of Java EE enterprise -level, based on classic technology combinations, Apache Shiro, MyBatis, Thymeleaf, Bootstrap), built-in multiple functional modules There is an arbitrary file access vulnerability in RuoYi system, and the unauthenticated remote attacker can access any sensitive information from target system
Other reference：None

 

Solution：

Update vendor patches.