'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:zentao_pro_rce_vulnerability（Rule ID：1070210332）

Release Date：2025/9/15

Rule Name：CVE-2020-7361:ZenTao Pro Remote Code Execution Vulnerability

Severity：critical

CVE ID：CVE-2020-7361

 

Descripiton：

EasyCorp ZenTao Pro is an open-source project management software that includes features such as product management, project management, quality management, and document management. In versions of EasyCorp ZenTao Pro 8.8.2 and earlier, there exists an operating system command injection vulnerability in the /pro/repo-create.html file. Attackers can leverage the 'path' parameter to exploit this vulnerability and execute arbitrary commands with SYSTEM privileges. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.