영카트 Reflected XSS 취약점 (KVE-2018-1618) 수정

2018-12-12 11:31:10 +09:00
parent d7898085a1
commit 013b67a63b
1 changed files with 1 additions and 1 deletions
--- a/shop/itemqaform.php
+++ b/shop/itemqaform.php
@ -12,7 +12,7 @@ if (!$is_member) {
    alert_close("상품문의는 회원만 작성 가능합니다.");
 }

-$w     = trim($_REQUEST['w']);
+$w     = preg_replace('/[^0-9a-z]/i', '', trim($_REQUEST['w']));
 $it_id = get_search_string(trim($_REQUEST['it_id']));
 $iq_id = preg_replace('/[^0-9]/', '', trim($_REQUEST['iq_id']));