KVE-2018-0732 취약점 수정

2018-10-01 10:48:59 +09:00
parent 6025f10116
commit 7524d29188
3 changed files with 23 additions and 8 deletions
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@ -714,6 +714,8 @@ function get_group($gr_id)
 function get_member($mb_id, $fields='*')
 {
    global $g5;
+    
+    $mb_id = preg_replace("/[^0-9a-z_]+/i", "", $mb_id);

    return sql_fetch(" select $fields from {$g5['member_table']} where mb_id = TRIM('$mb_id') ");
 }