'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

web_app:microsoft_sharepoint_code_injection_vul（Rule ID：1070210497）

Release Date：2025/9/15

Rule Name：CVE-2025-49704,CVE-2025-53770:Microsoft SharePoint Code Injection Vulnerability

Severity：critical

CVE ID：CVE-2025-49704 CVE-2025-53770

 

Descripiton：

Microsoft SharePoint is a set of enterprise business collaboration platform of Microsoft Corporation. The platform is used to integrate business information, share work, work with others, organize projects and work groups, and search people and information. Microsoft SharePoint has a code injection vulnerability. An attacker can use this vulnerability to remotely execute code.This rule supports to defend the A6: Vulnerabe and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.