This vulnerability allows remote attackers to perform SQL injection by manipulating the Structure_ID argument in the specified JSP file of Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System version 8.2.2. The injection flaw could lead to unauthorized database queries or modifications. The CVSS 4.0 base score is 6.9, indicating medium severity, with network attack vector, low complexity, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability. No official fix or mitigation has been published by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, modification, or deletion, potentially compromising the confidentiality and integrity of the system's data. The impact on availability is considered low to limited. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict access to the vulnerable endpoint, implement web application firewall (WAF) rules to detect and block SQL injection attempts targeting the Structure_ID parameter, and monitor for suspicious activity related to this vulnerability.