'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:seeyon_oa_background_form_imports_arbitrary_file_write_vulnerability（Rule ID：1070210323）

Release Date：2025/9/15

Rule Name：Seeyon OA Background Form Imports Arbitrary File Write Vulnerability

Severity：critical

CVE ID：

 

Descripiton：

Seeyon OA collaborative management platform is a collaborative management software for medium-sized and large enterprises. There is an arbitrary file write vulnerability in Seeyon OA background form import, which allows attackers to upload malicious files to the server, that may lead to remote code execution, website tampering or other forms of attacks, seriously threatening system and data security. The vulnerability affects Seeyon OA V5/G6 V8.1-V9.0SP1 series. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.