gper/Gnuboard5
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

git commit -am "[KVE-2026-0330]영카트_SQL_Injection취약점_수정";

Browse Source
This commit is contained in:
thisgun
2026-03-26 01:32:14 +00:00
parent 5054e24631
commit 01fab8136e
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mobile/shop/itemqalist.php
+5
View File
@@ -7,6 +7,11 @@ include_once(G5_MSHOP_PATH.'/_head.php');
$sql_common = " from `{$g5['g5_shop_item_qa_table']}` a join `{$g5['g5_shop_item_table']}` b on (a.it_id=b.it_id) ";
$sql_search = " where (1) ";
if( isset($sfl) && ! in_array($sfl, array('b.it_name', 'a.it_id', 'a.iq_subject', 'a.iq_question', 'a.iq_name', 'a.mb_id')) ){
//다른값이 들어가있다면 초기화
$sfl = '';
}
if(!$sfl)
$sfl = 'b.it_name';
mobile/shop/itemuselist.php
+5
View File
@@ -7,6 +7,11 @@ include_once(G5_MSHOP_PATH.'/_head.php');
$sql_common = " from `{$g5['g5_shop_item_use_table']}` a join `{$g5['g5_shop_item_table']}` b on (a.it_id=b.it_id) ";
$sql_search = " where a.is_confirm = '1' ";
if( isset($sfl) && ! in_array($sfl, array('b.it_name', 'a.it_id', 'a.is_subject', 'a.is_content', 'a.is_name', 'a.mb_id')) ){
//다른값이 들어가있다면 초기화
$sfl = '';
}
if(!$sfl)
$sfl = 'b.it_name';