KVE-2018-0300,0331,0356,0358,0370 그누보드/영카트 다중 취약점 수정

2018-05-23 11:58:06 +09:00
parent d9cc2f9414
commit c245be09a3
9 changed files with 13 additions and 4 deletions
--- a/adm/shop_admin/itemstocksms.php
+++ b/adm/shop_admin/itemstocksms.php
@ -33,6 +33,7 @@ if ($search != "") {

 if ($sel_field == "")  $sel_field = "it_it";
 if ($sort1 == "") $sort1 = "ss_send";
+if (!in_array($sort1, array('it_id', 'ss_hp', 'ss_send', 'ss_send_time', 'ss_datetime'))) $sort1 = "ss_send";
 if ($sort2 == "" || $sort2 != "desc") $sort2 = "asc";

 $doc = strip_tags($doc);