← CVE Intelligence

CVE-2026-16252

Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection PUBLISHED

Description (CNA)

A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument Structure_ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Affected (CNA)

Vendor / productVersions
Beijing Shenzhou Shihan Technology / Multimedia Integrated Business Display Systemaffected 8.2.2

CWE

CWE-89, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.