[KVE-2020-0097,0113,0114,0056]그누보드 다중 취약점 수정

2020-03-02 22:08:54 +09:00
parent 6fe20b0a13
commit 87bb2f1d8a
5 changed files with 29 additions and 2 deletions
--- a/adm/board_form_update.php
+++ b/adm/board_form_update.php
@ -60,6 +60,11 @@ if(!is_include_path_check($bo_include_tail, 1)) {
    alert('하단 파일 경로에 포함시킬수 없는 문자열이 있습니다.');
 }

+if( function_exists('filter_input_include_path') ){
+    $bo_include_head = filter_input_include_path($bo_include_head);
+    $bo_include_tail = filter_input_include_path($bo_include_tail);
+}
+
 $board_path = G5_DATA_PATH.'/file/'.$bo_table;

 // 게시판 디렉토리 생성