영카트 Reflected XSS 취약점 수정( 17-0558 )

2017-09-06 19:19:14 +09:00
parent a431225576
commit 9810fd7475
8 changed files with 19 additions and 6 deletions
--- a/adm/shop_admin/bannerformupdate.php
+++ b/adm/shop_admin/bannerformupdate.php
@ -34,6 +34,8 @@ if( $bn_bimg || $bn_bimg_name ){
    }
 }

+$bn_url = clean_xss_tags($bn_url);
+
 if ($w=="")
 {
    if (!$bn_bimg_name) alert('배너 이미지를 업로드 하세요.');