그누보드 다중 취약점 (17-0295, 334, 355) 수정

2017-09-28 20:23:28 +09:00
parent 5970f2a577
commit 0f4ec77ac0
6 changed files with 93 additions and 42 deletions
--- a/bbs/memo.php
+++ b/bbs/memo.php
@ -7,7 +7,7 @@ if ($is_guest)
 $g5['title'] = '내 쪽지함';
 include_once(G5_PATH.'/head.sub.php');

-if (!$kind) $kind = 'recv';
+$kind = $kind ? clean_xss_tags(strip_tags($kind)) : 'recv';

 if ($kind == 'recv')
    $unkind = 'send';