[KVE-2019-1141]영카트Cross Site Scripting(XSS) 취약점

gnuboard · Aug 12, 2019 · 9086c04 · 9086c04
1 parent 3dd6012
commit 9086c04
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/yc4_import_run.php b/yc4_import_run.php
@@ -181,8 +181,8 @@ function fsearchbox_submit(f)
         flush();
 
         // yc4의 confing.php, shop.config.php
-        require($g4_config_file);
-        require($shop_config_file);
+        require("./".$g4_config_file);
+        require("./".$shop_config_file);
 
         if( $g4 && is_array($g4) ){
            foreach($g4 as $k=>$v){