gper/Gnuboard5
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[KVE-2026-0554]그누보드,영카트 SQL Injection 취약점 수정

Browse Source
This commit is contained in:
thisgun
2026-03-30 09:52:41 +00:00
parent 60d37b853b
commit b2c0e1af29
4 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
shop/itemqaformupdate.php
+2 -2
View File
@@ -15,8 +15,8 @@ $hash = isset($_REQUEST['hash']) ? trim($_REQUEST['hash']) : '';
$get_editor_img_mode = $config['cf_editor'] ? false : true;
$iq_secret = isset($_POST['iq_secret']) ? (int) $_POST['iq_secret'] : 0;
$iq_email = isset($_POST['iq_email']) ? clean_xss_tags($_POST['iq_email'], 1, 1) : '';
$iq_hp = isset($_POST['iq_hp']) ? clean_xss_tags($_POST['iq_hp'], 1, 1) : '';
$iq_email = isset($_POST['iq_email']) ? addslashes(clean_xss_tags(stripslashes($_POST['iq_email']), 1, 1)) : '';
$iq_hp = isset($_POST['iq_hp']) ? addslashes(clean_xss_tags(stripslashes($_POST['iq_hp']), 1, 1)) : '';
$is_mobile_shop = isset($_REQUEST['is_mobile_shop']) ? (int) $_REQUEST['is_mobile_shop'] : 0;
if ($w == "" || $w == "u") {
shop/orderaddressupdate.php
+1 -1
View File
@@ -17,7 +17,7 @@ if ($is_member && $count) {
$k = isset($_POST['chk'][$i]) ? (int) $_POST['chk'][$i] : 0;
$ad_id = isset($_POST['ad_id'][$k]) ? (int) $_POST['ad_id'][$k] : 0;
$ad_subject = isset($_POST['ad_subject'][$k]) ? clean_xss_tags($_POST['ad_subject'][$k]) : '';
$ad_subject = isset($_POST['ad_subject'][$k]) ? addslashes(clean_xss_tags(stripslashes($_POST['ad_subject'][$k]))) : '';
$sql = " update {$g5['g5_shop_order_address_table']}
set ad_subject = '".sql_real_escape_string($ad_subject)."' ";