[KVE-2020-0164]영카트 XSS 취약점 수정

2020-03-12 12:14:14 +09:00
parent d0f81862bb
commit 4c90b5e3b1
3 changed files with 10 additions and 3 deletions
--- a/adm/shop_admin/itemformupdate.php
+++ b/adm/shop_admin/itemformupdate.php
@ -304,6 +304,8 @@ foreach( $check_sanitize_keys as $key ){
    $$key = isset($_POST[$key]) ? strip_tags(clean_xss_attributes($_POST[$key])) : '';
 }

+$it_basic = preg_replace('#<script(.*?)>(.*?)<\/script>#is', '', $it_basic);
+
 if ($it_name == "")
    alert("상품명을 입력해 주십시오.");