{"cves":{"cve":{"cveNumber":"CVE-2026-90600","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90600"}},"description":"Sales and Inventory System是itsourcecode公司的一款销售与库存管理企业资源计划系统。\n\nSales and Inventory System存在SQL注入漏洞，该漏洞源于/pages/inv_edit1.php文件未能正确验证ID参数，目前没有详细的漏洞细节提供。","formalWay":"目前厂商尚未发布升级程序修复该安全问题，详情见厂商官网：\r\nhttps://itsourcecode.com/","isEvent":"通用软硬件漏洞","number":"CNVD-2026-37979","openTime":"2026-09-20","products":{"product":"Sales and Inventory System Sales and Inventory System 1.0"},"referenceLink":"https://vuldb.com/vuln/403182","serverity":"中","submitTime":"2026-09-15","title":"Sales and Inventory System SQL注入漏洞（CNVD-2026-37979）"}