PT-2026-61595 · Beijing Shenzhou Shihan Technology · Multimedia Integrated Business Display System

Bigbrother_Man

·

CVE-2026-16252

·

Published

2026-07-20

·

Updated

2026-07-20

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System version 8.2.2
Description A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries. The issue exists in the /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa endpoint via the Structure ID parameter.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the Structure ID parameter in the /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa endpoint to minimize the risk of exploitation.

Exploit

SQL injection

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89CWE-74

Related Identifiers

CVE-2026-16252

Affected Products

Multimedia Integrated Business Display System