영카트 임의 코드 실행 취약점 수정 ( 17-0268 )

2017-10-10 15:11:18 +09:00
parent 8b71bfb172
commit e245687775
2 changed files with 3 additions and 3 deletions
--- a/shop/listtype.php
+++ b/shop/listtype.php
@ -36,7 +36,7 @@ else
 if (!$skin)
    $skin = $default['de_listtype_list_skin'];
 else
-    $skin = preg_replace('#\.+/#', '', $skin);
+    $skin = preg_replace('#\.+[\\\/]#', '', $skin);

 define('G5_SHOP_CSS_URL', G5_SHOP_SKIN_URL);