cnvd-2026-37976

cnvd

Description

Sales and Inventory System是itsourcecode公司的一款销售与库存管理企业资源计划系统。 Sales and Inventory System存在SQL注入漏洞，该漏洞源于文件/pages/pro_transac.php?action=add中参数Name缺少对外部输入SQL语句的验证，攻击者可利用该漏洞执行非法SQL命令窃取数据库敏感数据。

Timeline

Published: unknown
Last Modified: unknown

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-86236",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-86236"
    }
  },
  "description": "Sales and Inventory System是itsourcecode公司的一款销售与库存管理企业资源计划系统。\n\nSales and Inventory System存在SQL注入漏洞，该漏洞源于文件/pages/pro_transac.php?action=add中参数Name缺少对外部输入SQL语句的验证，攻击者可利用该漏洞执行非法SQL命令窃取数据库敏感数据。",
  "formalWay": "目前厂商尚未发布升级程序修复该安全问题，详情见厂商官网：\r\nhttps://itsourcecode.com/",
  "isEvent": "通用软硬件漏洞",
  "number": "CNVD-2026-37976",
  "openTime": "2026-09-20",
  "products": {
    "product": "Sales and Inventory System Sales and Inventory System 1.0"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-86236",
  "serverity": "中",
  "submitTime": "2026-09-16",
  "title": "Sales and Inventory System SQL注入漏洞（CNVD-2026-37976）"
}

View JSON API Download JSON

cnvd-2026-37976

Raw JSON Data