'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:weaver_ecology_sql_injection_vulnerability（Rule ID：1070210412）

Release Date：2025/9/15

Rule Name：Weaver E-Cology ifNewsCheckOutByCurrentUser SQL Injection Vulnerability

Severity：critical

CVE ID：

 

Descripiton：

Weaver E-cology is a set of enterprise information portal, knowledge document management, workflow management, human resource management, customer relationship management, project management, financial management, asset management, supply chain management, data center functions of enterprise large-scale collaborative management platform. There is an SQL injection vulnerability in the ifNewsCheckOutByCurrentUser. dwr interface of E-ology, which allows attackers to inject malicious SQL statements, resulting in data leakage or unauthorized operations.
Other reference：None

 

Solution：

Update vendor patches.