gper/Gnuboard5
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[KVE-2026-0569]그누보드,영카트 SQL Injection 취약점 수정

Browse Source
This commit is contained in:
thisgun
2026-03-30 11:50:30 +00:00
parent bf19cd8bf5
commit c3db9b454e
7 changed files with 34 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
shop/kakaopay/mobile_pay_approval.php
+4 -4
View File
@@ -138,10 +138,10 @@ if(isset($data['pp_id']) && !empty($data['pp_id'])) {
}
$good_mny = $PAY['P_AMT'];
$pp_name = clean_xss_tags($data['pp_name']);
$pp_email = clean_xss_tags($data['pp_email']);
$pp_hp = clean_xss_tags($data['pp_hp']);
$pp_settle_case = clean_xss_tags($data['pp_settle_case']);
$pp_name = addslashes(clean_xss_tags($data['pp_name']));
$pp_email = addslashes(clean_xss_tags($data['pp_email']));
$pp_hp = addslashes(clean_xss_tags($data['pp_hp']));
$pp_settle_case = addslashes(clean_xss_tags($data['pp_settle_case']));
$_POST['P_HASH'] = $hash;
$_POST['P_AUTH_NO'] = $PAY['P_AUTH_NO'];
shop/orderformupdate.php
+1 -1
View File
@@ -953,7 +953,7 @@ if($is_member) {
sql_query($sql);
}
$ad_subject = isset($_POST['ad_subject']) ? clean_xss_tags($_POST['ad_subject']) : '';
$ad_subject = isset($_POST['ad_subject']) ? addslashes(clean_xss_tags(stripslashes($_POST['ad_subject']))) : '';
if(isset($row['ad_id']) && $row['ad_id']){
$sql = " update {$g5['g5_shop_order_address_table']}