[KVE-2019-0688,0689,0691,0694,0708,0709,0750,0762,0791,0802,0846] 그누보드,영카트 다중 취약점 수정

2019-05-24 10:44:48 +09:00
parent e234b990ec
commit 18d4a60e03
9 changed files with 54 additions and 24 deletions
--- a/plugin/okname/ipin2.php
+++ b/plugin/okname/ipin2.php
@ -1,8 +1,14 @@
 <?php
 include_once('./_common.php');

-if( isset($_REQUEST['exe']) && isset($exe) && $exe ){
-    die('bad request');
+$check_arrays = array('exe', 'keypath', 'memid', 'EndPointURL', 'cpubkey', 'csig', 'encdata', 'logpath', 'option');
+
+foreach($check_arrays as $key){
+    if( isset($_REQUEST[$key]) && $_REQUEST[$key] ){
+        die('bad request');
+    }
+
+    $$key = '';
 }

 include('./ipin.config.php');