Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

web_app:inspur_gs_arbitrary_file_read_vul（Rule ID：1070210506）

Release Date：2025/9/15

Rule Name：Inspur GS Arbitrary File Read Vulnerability

Severity：high

CVE ID：

Descripiton：

Inspur GS is Inspur's ERP/digital suite for large, medium-sized and state-owned group enterprises. It supports compliance operation, group collaboration and intelligent manufacturing through integrated centralized management and control of finance, capital, supply chain and cloud native architecture. Inspur GS has an arbitrary file reading vulnerability, which can be used by attackers to obtain server sensitive data. This rule supports to defend the A6: Vulnerabe and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

Solution：

Update vendor patches.