'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:hongfan_ioffice_sql_vulnerability（Rule ID：1070210566）

Release Date：2026/6/1

Rule Name：Hongfan iOffice Multiple Interfaces SQL Injection Vulnerability

Severity：critical

CVE ID：

 

Descripiton：

Hongfan ioffice is a software specially designed for hospital integrated business management, including information portal, document circulation, process management, document management, meeting management, document management, leadership cockpit and other functional modules. There is an SQL injection vulnerability at the Hongfan iOffice multiple Interfaces, which allows unauthorized attackers to obtain sensitive database information and credentials, ultimately leading to server crashes. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.