LFI to RCE 취약점 수정

2017-02-06 20:00:18 +09:00
parent ce03af265e
commit ed957cf6b3
7 changed files with 51 additions and 10 deletions
--- a/bbs/qahead.php
+++ b/bbs/qahead.php
@ -9,7 +9,7 @@ if (G5_IS_MOBILE) {
    include_once('./_head.php');
    echo conv_content($qaconfig['qa_mobile_content_head'], 1);
 } else {
-    if($qaconfig['qa_include_head'])
+    if(is_include_path_check($qaconfig['qa_include_head']))
        @include ($qaconfig['qa_include_head']);
    else
        include ('./_head.php');