'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:tongda_oa_arbitrary_file_download_vulnerability（Rule ID：1070210401）

Release Date：2025/9/15

Rule Name：Tongda OA get_file.php Arbitrary File Download Vulnerability

Severity：critical

CVE ID：

 

Descripiton：

Tongda OA is a collaborative office automation system independently developed by Beijing Tongda Xinke Technology Co., LTD. Its get_file.php web page has any file download vulnerability, and attackers can download any file from the server through the vulnerability. This rule may contain false positives. If normal services are affected, you are advised to disable this rule.
Other reference：None

 

Solution：

Update vendor patches.