KVE-2018-1827, 1828, 1829, 1830 그누보드/영카트 다중 취약점 처리

2019-01-07 14:13:03 +09:00
parent 1ba5bb09fc
commit 4cc8284016
5 changed files with 14 additions and 2 deletions
--- a/adm/sms_admin/history_view.php
+++ b/adm/sms_admin/history_view.php
@ -8,6 +8,10 @@ $colspan = 10;
 $st = isset($st) ? strip_tags($st) : '';
 $ssv = isset($ssv) ? strip_tags($ssv) : '';

+if( $st && !in_array($st, array('hs_name', 'hs_hp', 'bk_no')) ){
+    $st = '';
+}
+
 auth_check($auth[$sub_menu], "r");

 $g5['title'] = "문자전송 상세내역";