Based on our research, we recommend the following:
In op/op.AddDocument2.php , change:
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"SeedDMS 5.1.22 SQLi attempt"; flow:to_server,established; content:"folderid="; http_uri; content:"SELECT"; http_uri; nocase; sid:9000001;) seeddms 5.1.22 exploit
