diff --git a/adm/auth_list.php b/adm/auth_list.php
index 998c3fba9..70216f37d 100644
--- a/adm/auth_list.php
+++ b/adm/auth_list.php
@@ -8,6 +8,11 @@ if ($is_admin != 'super') {
 
 $sql_common = " from {$g5['auth_table']} a left join {$g5['member_table']} b on (a.mb_id=b.mb_id) ";
 
+$allowed_sfl = array('a.mb_id');
+if (!in_array($sfl, $allowed_sfl)) {
+    $sfl = 'a.mb_id';
+}
+
 $sql_search = " where (1) ";
 if ($stx) {
     $sql_search .= " and ( ";
diff --git a/adm/board_list.php b/adm/board_list.php
index f63fd0fb8..faeb8bea1 100644
--- a/adm/board_list.php
+++ b/adm/board_list.php
@@ -12,6 +12,11 @@ if ($is_admin != "super") {
     $sql_search .= " and (a.gr_id = b.gr_id and b.gr_admin = '{$member['mb_id']}') ";
 }
 
+$allowed_sfl = array('bo_table', 'bo_subject', 'a.gr_id');
+if (!in_array($sfl, $allowed_sfl)) {
+    $sfl = 'bo_table';
+}
+
 if ($stx) {
     $sql_search .= " and ( ";
     switch ($sfl) {
diff --git a/adm/boardgroup_list.php b/adm/boardgroup_list.php
index a9c28f5bd..a05b6d976 100644
--- a/adm/boardgroup_list.php
+++ b/adm/boardgroup_list.php
@@ -20,6 +20,11 @@ if ($is_admin != 'super') {
     $sql_search .= " and (gr_admin = '{$member['mb_id']}') ";
 }
 
+$allowed_sfl = array('gr_subject', 'gr_id', 'gr_admin');
+if (!in_array($sfl, $allowed_sfl)) {
+    $sfl = 'gr_subject';
+}
+
 if ($stx) {
     $sql_search .= " and ( ";
     switch ($sfl) {
diff --git a/adm/boardgroupmember_list.php b/adm/boardgroupmember_list.php
index aa8433af2..c64be9379 100644
--- a/adm/boardgroupmember_list.php
+++ b/adm/boardgroupmember_list.php
@@ -13,6 +13,11 @@ $sql_common = " from {$g5['group_member_table']} a
                          left outer join {$g5['member_table']} b on (a.mb_id = b.mb_id) ";
 $sql_search = " where gr_id = '{$gr_id}' ";
 
+$allowed_sfl = array('a.mb_id');
+if (!in_array($sfl, $allowed_sfl)) {
+    $sfl = 'a.mb_id';
+}
+
 // 회원아이디로 검색되지 않던 오류를 수정
 if (isset($stx) && $stx) {
     $sql_search .= " and ( ";
diff --git a/adm/member_list.php b/adm/member_list.php
index 778ad1497..e3bdc5003 100644
--- a/adm/member_list.php
+++ b/adm/member_list.php
@@ -6,7 +6,6 @@ auth_check_menu($auth, $sub_menu, 'r');
 
 $sql_common = " from {$g5['member_table']} ";
 
-// $sfl 화이트리스트 검증 (KVE-2026-0340)
 $allowed_sfl = array('mb_id', 'mb_nick', 'mb_name', 'mb_level', 'mb_email', 'mb_tel', 'mb_hp', 'mb_point', 'mb_datetime', 'mb_ip', 'mb_recommend');
 if (!in_array($sfl, $allowed_sfl)) {
     $sfl = 'mb_id';
diff --git a/adm/point_list.php b/adm/point_list.php
index 0e2d02198..942189dd8 100644
--- a/adm/point_list.php
+++ b/adm/point_list.php
@@ -6,6 +6,11 @@ auth_check_menu($auth, $sub_menu, 'r');
 
 $sql_common = " from {$g5['point_table']} po";
 
+$allowed_sfl = array('mb_id', 'po_content');
+if (!in_array($sfl, $allowed_sfl)) {
+    $sfl = 'mb_id';
+}
+
 $sql_search = " where (1) ";
 
 if ($stx) {
diff --git a/adm/poll_list.php b/adm/poll_list.php
index 09d58f98d..e957605cf 100644
--- a/adm/poll_list.php
+++ b/adm/poll_list.php
@@ -6,6 +6,11 @@ auth_check_menu($auth, $sub_menu, 'r');
 
 $sql_common = " from {$g5['poll_table']} ";
 
+$allowed_sfl = array('po_subject');
+if (!in_array($sfl, $allowed_sfl)) {
+    $sfl = 'po_subject';
+}
+
 $sql_search = " where (1) ";
 if ($stx) {
     $sql_search .= " and ( ";
diff --git a/adm/popular_list.php b/adm/popular_list.php
index e2d16888b..e0cfccfe2 100644
--- a/adm/popular_list.php
+++ b/adm/popular_list.php
@@ -16,6 +16,11 @@ if (isset($_POST['chk']) && is_array($_POST['chk'])) {
 }
 
 $sql_common = " from {$g5['popular_table']} a ";
+$allowed_sfl = array('pp_word', 'pp_date');
+if (!in_array($sfl, $allowed_sfl)) {
+    $sfl = 'pp_word';
+}
+
 $sql_search = " where (1) ";
 
 if ($stx) {
diff --git a/adm/shop_admin/inorderlist.php b/adm/shop_admin/inorderlist.php
index c23730e02..c55586a1d 100644
--- a/adm/shop_admin/inorderlist.php
+++ b/adm/shop_admin/inorderlist.php
@@ -6,6 +6,11 @@ auth_check_menu($auth, $sub_menu, "r");
 
 $sql_common = " from {$g5['g5_shop_order_data_table']} ";
 
+$allowed_sfl = array('od_id');
+if (!in_array($sfl, $allowed_sfl)) {
+    $sfl = 'od_id';
+}
+
 $sql_search = " where cart_id <> '0' ";
 if ($stx) {
     $sql_search .= " and ( ";
diff --git a/adm/shop_admin/personalpaylist.php b/adm/shop_admin/personalpaylist.php
index dfa0738ac..e1cee42e7 100644
--- a/adm/shop_admin/personalpaylist.php
+++ b/adm/shop_admin/personalpaylist.php
@@ -6,6 +6,11 @@ auth_check_menu($auth, $sub_menu, "r");
 
 $sql_common = " from {$g5['g5_shop_personalpay_table']} ";
 
+$allowed_sfl = array('pp_id', 'pp_name', 'od_id');
+if (!in_array($sfl, $allowed_sfl)) {
+    $sfl = 'pp_id';
+}
+
 $sql_search = " where (1) ";
 if ($stx) {
     $sql_search .= " and ( ";