영카트 임의 코드 실행 취약점 수정 ( 17-0268 )

gnuboard · Oct 11, 2017 · b9382cb · b9382cb
1 parent 823db67
commit b9382cb
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/lib/shop.lib.php b/lib/shop.lib.php
@@ -152,9 +152,9 @@ function set_event($ev_id) {
     function set_list_skin($list_skin) {
         global $default;
         if ($this->is_mobile) {
-            $this->list_skin = $list_skin ? $list_skin : G5_MSHOP_SKIN_PATH.'/'.$default['de_mobile_type'.$this->type.'_list_skin'];
+            $this->list_skin = $list_skin ? $list_skin : G5_MSHOP_SKIN_PATH.'/'.preg_replace('/[^A-Za-z0-9 _ .-]/', '', $default['de_mobile_type'.$this->type.'_list_skin']);
         } else {
-            $this->list_skin = $list_skin ? $list_skin : G5_SHOP_SKIN_PATH.'/'.$default['de_type'.$this->type.'_list_skin'];
+            $this->list_skin = $list_skin ? $list_skin : G5_SHOP_SKIN_PATH.'/'.preg_replace('/[^A-Za-z0-9 _ .-]/', '', $default['de_type'.$this->type.'_list_skin']);
         }
     }
 

diff --git a/shop/listtype.php b/shop/listtype.php
@@ -36,7 +36,7 @@
 if (!$skin)
     $skin = $default['de_listtype_list_skin'];
 else
-    $skin = preg_replace('#\.+/#', '', $skin);
+    $skin = preg_replace('#\.+[\\\/]#', '', $skin);
 
 define('G5_SHOP_CSS_URL', G5_SHOP_SKIN_URL);