{"cves":{"cve":{"cveNumber":"CVE-2026-82696","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-82696"}},"description":"Sales and Inventory System是itsourcecode公司的一款销售与库存管理企业资源计划系统。\n\nSales and Inventory System存在SQL注入漏洞，该漏洞源于文件/pages/inv_searchfrm.php中参数ID缺少对外部输入SQL语句的验证，攻击者可利用该漏洞执行非法SQL命令窃取数据库敏感数据。","formalWay":"目前厂商尚未发布升级程序修复该安全问题，详情见厂商官网：\r\nhttps://itsourcecode.com/","isEvent":"通用软硬件漏洞","number":"CNVD-2026-37975","openTime":"2026-09-20","products":{"product":"Sales and Inventory System Sales and Inventory System 1.0"},"referenceLink":"https://nvd.nist.gov/vuln/detail/CVE-2026-82696","serverity":"中","submitTime":"2026-09-16","title":"Sales and Inventory System SQL注入漏洞（CNVD-2026-37975）"}