KVE-2018-0300,0331,0356,0358,0370 그누보드/영카트 다중 취약점 수정

2018-05-23 11:58:06 +09:00
parent d9cc2f9414
commit c245be09a3
9 changed files with 13 additions and 4 deletions
--- a/adm/shop_admin/itemeventlist.php
+++ b/adm/shop_admin/itemeventlist.php
@ -6,6 +6,7 @@ auth_check($auth[$sub_menu], "r");

 $ev_id = preg_replace('/[^0-9]/', '', $ev_id);
 $sort1 = strip_tags($sort1);
+if (!in_array($sort1, array('a.it_id', 'it_name'))) $sort1 = "a.it_id";
 $sel_field = strip_tags($sel_field);
 $sel_ca_id = get_search_string($sel_ca_id);
 $search = get_search_string($search);