firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

[KVE-2019-1518] 영카트 5_Cross Site Scripting(XSS) 취약점 수정

Browse Source
This commit is contained in:
thisgun
2020-01-23 12:10:30 +09:00
parent cf2a15ee33
commit 46e138f321
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
adm/shop_admin/itemformupdate.php
View File

@ -218,7 +218,7 @@ if($option_count) {
// 옵션명 // 옵션명
$opt1_cnt = $opt2_cnt = $opt3_cnt = 0; $opt1_cnt = $opt2_cnt = $opt3_cnt = 0;
for($i=0; $i<$option_count; $i++) { for($i=0; $i<$option_count; $i++) {
$_POST['opt_id'][$i] = preg_replace(G5_OPTION_ID_FILTER, '', $_POST['opt_id'][$i]); $_POST['opt_id'][$i] = preg_replace(G5_OPTION_ID_FILTER, '', strip_tags($_POST['opt_id'][$i]));
$opt_val = explode(chr(30), $_POST['opt_id'][$i]); $opt_val = explode(chr(30), $_POST['opt_id'][$i]);
if($opt_val[0]) if($opt_val[0])
@ -246,7 +246,7 @@ if($supply_count) {
// 추가옵션명 // 추가옵션명
$arr_spl = array(); $arr_spl = array();
for($i=0; $i<$supply_count; $i++) { for($i=0; $i<$supply_count; $i++) {
$_POST['spl_id'][$i] = preg_replace(G5_OPTION_ID_FILTER, '', $_POST['spl_id'][$i]); $_POST['spl_id'][$i] = preg_replace(G5_OPTION_ID_FILTER, '', strip_tags($_POST['spl_id'][$i]));
$spl_val = explode(chr(30), $_POST['spl_id'][$i]); $spl_val = explode(chr(30), $_POST['spl_id'][$i]);
if(!in_array($spl_val[0], $arr_spl)) if(!in_array($spl_val[0], $arr_spl))