diff --git a/adm/contentform.php b/adm/contentform.php
index 133f36e2e..4abe574d9 100644
--- a/adm/contentform.php
+++ b/adm/contentform.php
@@ -104,6 +104,7 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
+
|
diff --git a/adm/contentformupdate.php b/adm/contentformupdate.php
index 69f82f0b0..d9c699b57 100644
--- a/adm/contentformupdate.php
+++ b/adm/contentformupdate.php
@@ -24,6 +24,7 @@ $co_id = preg_replace('/[^a-z0-9_]/i', '', $co_id);
$co_subject = strip_tags($co_subject);
$co_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_head, 0, 255));
$co_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_tail, 0, 255));
+$co_tag_filter_use = isset($_POST['co_tag_filter_use']) ? (int) $_POST['co_tag_filter_use'] : 1;
// 관리자가 자동등록방지를 사용해야 할 경우
if (($co_row['co_include_head'] !== $co_include_head || $co_row['co_include_tail'] !== $co_include_tail) && function_exists('get_admin_captcha_by') && get_admin_captcha_by()){
diff --git a/bbs/content.php b/bbs/content.php
index 366e11e54..fb19fd7e3 100644
--- a/bbs/content.php
+++ b/bbs/content.php
@@ -26,6 +26,8 @@ if ($co['co_include_head'] && is_include_path_check($co['co_include_head']))
else
include_once('./_head.php');
+// KVE-2019-0828 취약점 내용
+$co['co_tag_filter_use'] = 1;
$str = conv_content($co['co_content'], $co['co_html'], $co['co_tag_filter_use']);
// $src 를 $dst 로 변환
|