'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:yonyou_u8_crm_import.php_arbitrary_file_upload_vulnerability（Rule ID：1070210385）

Release Date：2025/9/15

Rule Name：Yonyou U8 CRM import.php Arbitrary File Upload Vulnerability

Severity：critical

CVE ID：

 

Descripiton：

Yonyou U8 CRM is a customer relationship management tool embedded in the UFIDA U8 ERP system, which can comprehensively control customer information, sales business, market activities, and after-sales support, helping enterprises enhance customer experience, explore potential business opportunities, and optimize marketing decisions. Yonyou U8 CRM has an arbitrary file upload vulnerability, which attackers can exploit to upload malicious files.This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.