KVE-2018-1827, 1828, 1829, 1830 그누보드/영카트 다중 취약점 처리

2019-01-07 14:13:03 +09:00
parent 1ba5bb09fc
commit 4cc8284016
5 changed files with 14 additions and 2 deletions
--- a/adm/sms_admin/history_num.php
+++ b/adm/sms_admin/history_num.php
@ -16,6 +16,10 @@ if ($st && trim($sv))
 else
    $sql_search = "";

+if( isset($st) && !in_array($st, array('hs_name', 'hs_hp', 'bk_no')) ){
+    $st = '';
+}
+
 $total_res = sql_fetch("select count(*) as cnt from {$g5['sms5_history_table']} where 1 $sql_search");
 $total_count = $total_res['cnt'];