'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

web_app:seeyon_authentication_bypass（Rule ID：1070210524）

Release Date：2025/9/15

Rule Name：Seeyon ucpcLogin Authentication Bypass Vulnerability

Severity：high

CVE ID：

 

Descripiton：

Seeyon OA is an intelligent office platform with collaboration and mobility as its core. It connects organizational processes, knowledge and people with one click, enabling all staff to collaborate efficiently anytime, anywhere. There is an authentication bypass vulnerability in Seeyon OA ucpcLogin interface. An attacker can use the vulnerability to modify the password of Seeyon OA's own user to obtain permissions. This rule supports to defend the A6: Vulnerabe and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.