Description
A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument Structure_ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Beijing Shenzhou Shihan Technology | Multimedia Integrated Business Display System | 8.2.2 | — |
References
- VDB-380551 | Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection vdb-entry technical-description
- VDB-380551 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-16252 | CVE Analysis and Report third-party-advisory
- Submit #858453 | Beijing Shenzhou Shihuan Technology Co., Ltd. 多媒体综合业务系统 V8.2.2 SQL Injection third-party-advisory
- https://ucn9h68n9289.feishu.cn/docx/XSuvdAP8foTOKzxEnZaclsZznMb?from=from_copylink exploit