ECShop 2.7.2 SQL Injection

ECSHOP is one of the most famous shopping apps of china. The last vesion of ECShop is V2.7.2. It has a ORNUM type injection in filterattr Parameter of category.php. For example:...