CVE-2020-22204

SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. .