firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

Reflected XSS, 원격코드 취약점 수정(17-0155, 0156, 0157)

Browse Source
This commit is contained in:
thisgun
2017-03-28 10:18:02 +09:00
parent 1f7103c33c
commit 33ad378400
4 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
adm/shop_admin/categoryformupdate.php
View File

@ -35,6 +35,10 @@ if ($w == "" || $w == "u")
}
}
if( $ca_skin && ! is_include_path_check($ca_skin) ){
alert('오류 : 데이터폴더가 포함된 path 를 포함할수 없습니다.');
}
$sql_common = " ca_order = '$ca_order',
ca_skin_dir = '$ca_skin_dir',
ca_mobile_skin_dir = '$ca_mobile_skin_dir',

4
adm/shop_admin/categorylistupdate.php
View File

@ -17,6 +17,10 @@ for ($i=0; $i<count($_POST['ca_id']); $i++)
if (!$row['mb_id'])
alert("\'{$_POST['ca_mb_id'][$i]}\' 은(는) 존재하는 회원아이디가 아닙니다.", "./categorylist.php?$qstr");
}
if( !empty($_POST['ca_skin'][$i]) && ! is_include_path_check($_POST['ca_skin'][$i]) ){
alert('오류 : 데이터폴더가 포함된 path 를 포함할수 없습니다.');
}
$sql = " update {$g5['g5_shop_category_table']}
set ca_name = '{$_POST['ca_name'][$i]}',

2
mobile/shop/list.php
View File

@ -107,7 +107,7 @@ var g5_shop_url = "<?php echo G5_SHOP_URL; ?>";
$error = '<p class="sct_noitem">등록된 상품이 없습니다.</p>';
// 리스트 스킨
$skin_file = $skin_dir.'/'.$ca['ca_mobile_skin'];
$skin_file = is_include_path_check($skin_dir.'/'.$ca['ca_mobile_skin']) ? $skin_dir.'/'.$ca['ca_mobile_skin'] : $skin_dir.'/list.10.skin.php';
if (file_exists($skin_file)) {
$sort_skin = $skin_dir.'/list.sort.skin.php';

2
shop/list.php
View File

@ -90,7 +90,7 @@ var itemlist_ca_id = "<?php echo $ca_id; ?>";
$error = '<p class="sct_noitem">등록된 상품이 없습니다.</p>';
// 리스트 스킨
$skin_file = $skin_dir.'/'.$ca['ca_skin'];
$skin_file = is_include_path_check($skin_dir.'/'.$ca['ca_skin']) ? $skin_dir.'/'.$ca['ca_skin'] : $skin_dir.'/list.10.skin.php';
if (file_exists($skin_file)) {