泛微 e-cology CptInstock1Ajax 存在sql注入

fofa：

body="/js/ecology8" || body="wui/common/css/w7OVFont_wev8.css"||(body="weaver"&&body="ecology")
    || (header="ecology_JSessionId"&&body="login/Login.jsp")||body="/wui/index.html"||body="jquery_wev8"

poc：