영카트5 보안패치 5.2.7

페이지 정보

조회 3,217회 작성일 2017-03-21 19:17 URL https://webdraw.kr/notice/475

본문

** 수정내역 ** 

 

LFI to RCE 취약점 수정 ( debukuk 님이 제보해 주셨습니다. ) 

원격코드 실행 취약점(17-00160) 수정 ( 한국인터넷진흥원에서 알려주셨습니다. ) 

원본 이미지 비율 유지하며 썸네일 생성 ( 편리님이 소스 공개 해 주셨습니다. ) 

cheditor5 소스 수정 ( ie11 에서 이미지 업로드가 되지 않는 문제점을 고쳤습니다. ) 

 

부분옵션 검색 관련 부분 수정 ( dnxogk 님이 알려주셨습니다. ) 

주문내역 오류 수정 및 오타 수정 ( 왕대인님이 제보해 주셨습니다. ) 

미완료 주문에서 변수 누락 ( 왕대인님이 제보해 주셨습니다. ) 

PHP 5.2.0 이상 버전에서 PHPExcel 라이브러리 적용을 했습니다. 

상품 사용후기에 관리자가 추가로 답변할수 있도록 수정되었습니다. 

 

 

 

https://github.com/gnuboard/youngcart5/commit/86e52ce756b1a7f03e30a84efd6a830d59c9bf60 

https://github.com/gnuboard/youngcart5/commit/cf6110760e7085e93b14a48f96cabaae7f7529bd 

https://github.com/gnuboard/youngcart5/commit/819246875991539aadd0daaca6de7394cfda7384 

https://github.com/gnuboard/youngcart5/commit/6298116cb1aece139fae9488e3189486be8e22b2 

https://github.com/gnuboard/youngcart5/commit/5fc96bdeb1234462ed7b5b49020bcc29388cbbb9 

https://github.com/gnuboard/youngcart5/commit/47017c7adb085f793aeb467e23779652c2918b9a 

https://github.com/gnuboard/youngcart5/commit/a78afd86f5d69eab0d4ed2053c645ce3d4dd9563 

https://github.com/gnuboard/youngcart5/commit/b1b273015477c415ec96952bb93dc85fa12fa74d 

https://github.com/gnuboard/youngcart5/commit/b0e18bc266cb731b100388eca924e9be9abea0e5 

https://github.com/gnuboard/youngcart5/commit/ef0680c22cd75575c4d2048b63445f47a1ecc393 

https://github.com/gnuboard/youngcart5/commit/34537190cba008cc1df8c92fdb05cf1f1487f8f2 

https://github.com/gnuboard/youngcart5/commit/4d9180f9dc8895bc6476e9de345098e5aac18a66 

https://github.com/gnuboard/youngcart5/commit/5df2808d243a6bc721d21f15f370f2a9e57fd0d1 

https://github.com/gnuboard/youngcart5/commit/2287179db18fec75b5ea1f23060d41e263a0ad45 

https://github.com/gnuboard/youngcart5/commit/20935b53dfc81b841b674d01f907800ddc9a5963 

https://github.com/gnuboard/youngcart5/commit/7fcaa01d3b305a419cf165ae47edf4ecfae13677 

https://github.com/gnuboard/youngcart5/commit/9e54285ff648212b07a7677457ee95be35e065f7 

 

 

 

9e652ac 원본비율에 맟춰 리사이트 추가 

M lib/shop.lib.php 

08518d0 5.2.7 버전변경 

08b8d1e 썸네일 파일 수정 

M lib/thumbnail.lib.php 

c2a2a11 5.2.7 버전변경 

M config.php 

54abbdd cheditor 소스 수정 

M head.sub.php 

M plugin/editor/cheditor5/popup/js/image.html5.js 

e88a7db 네이버 페이 장바구니 소스 수정 

M shop/naverpay/naverpay_order.php 

393ed70 사용후기에 관리자의 답변 달기 추가 

M adm/shop_admin/itemuseform.php 

M adm/shop_admin/itemuseformupdate.php 

M css/mobile_shop.css 

A mobile/shop/img/use_reply.png 

A mobile/skin/shop/basic/img/use_reply.png 

M mobile/skin/shop/basic/itemuse.skin.php 

M mobile/skin/shop/basic/itemuselist.skin.php 

M mobile/skin/shop/basic/style.css 

A skin/shop/basic/img/use_reply.png 

M skin/shop/basic/itemuse.skin.php 

M skin/shop/basic/itemuselist.skin.php 

M skin/shop/basic/style.css 

M theme/basic/css/mobile_shop.css 

A theme/basic/mobile/shop/img/use_reply.png 

A theme/basic/mobile/skin/shop/basic/img/use_reply.png 

M theme/basic/mobile/skin/shop/basic/itemuse.skin.php 

M theme/basic/mobile/skin/shop/basic/itemuselist.skin.php 

M theme/basic/mobile/skin/shop/basic/style.css 

A theme/basic/skin/shop/basic/img/use_reply.png 

M theme/basic/skin/shop/basic/itemuse.skin.php 

M theme/basic/skin/shop/basic/itemuselist.skin.php 

M theme/basic/skin/shop/basic/style.css 

c6425ad 원격코드 실행 취약점(17-00160) 수정 

M adm/board_form_update.php 

M adm/sms_admin/_common.php 

M bbs/board_head.php 

M bbs/board_tail.php 

M plugin/htmlpurifier/safeiframe.txt 

4cdd64b PHP 5.2.0 이상 버전에서 PHPExcel 라이브러리 적용:wq 

M adm/shop_admin/orderdeliveryexcel.php 

A lib/PHPExcel.php 

A lib/PHPExcel/Autoloader.php 

A lib/PHPExcel/CachedObjectStorage/APC.php 

A lib/PHPExcel/CachedObjectStorage/CacheBase.php 

A lib/PHPExcel/CachedObjectStorage/DiscISAM.php 

A lib/PHPExcel/CachedObjectStorage/ICache.php 

A lib/PHPExcel/CachedObjectStorage/Igbinary.php 

A lib/PHPExcel/CachedObjectStorage/Memcache.php 

A lib/PHPExcel/CachedObjectStorage/Memory.php 

A lib/PHPExcel/CachedObjectStorage/MemoryGZip.php 

A lib/PHPExcel/CachedObjectStorage/MemorySerialized.php 

A lib/PHPExcel/CachedObjectStorage/PHPTemp.php 

A lib/PHPExcel/CachedObjectStorage/SQLite.php 

A lib/PHPExcel/CachedObjectStorage/SQLite3.php 

A lib/PHPExcel/CachedObjectStorage/Wincache.php 

A lib/PHPExcel/CachedObjectStorageFactory.php 

A lib/PHPExcel/CalcEngine/CyclicReferenceStack.php 

A lib/PHPExcel/CalcEngine/Logger.php 

A lib/PHPExcel/Calculation.php 

A lib/PHPExcel/Calculation/Database.php 

A lib/PHPExcel/Calculation/DateTime.php 

A lib/PHPExcel/Calculation/Engineering.php 

A lib/PHPExcel/Calculation/Exception.php 

A lib/PHPExcel/Calculation/ExceptionHandler.php 

A lib/PHPExcel/Calculation/Financial.php 

A lib/PHPExcel/Calculation/FormulaParser.php 

A lib/PHPExcel/Calculation/FormulaToken.php 

A lib/PHPExcel/Calculation/Function.php 

A lib/PHPExcel/Calculation/Functions.php 

A lib/PHPExcel/Calculation/Logical.php 

A lib/PHPExcel/Calculation/LookupRef.php 

A lib/PHPExcel/Calculation/MathTrig.php 

A lib/PHPExcel/Calculation/Statistical.php 

A lib/PHPExcel/Calculation/TextData.php 

A lib/PHPExcel/Calculation/Token/Stack.php 

A lib/PHPExcel/Calculation/functionlist.txt 

A lib/PHPExcel/Cell.php 

A lib/PHPExcel/Cell/AdvancedValueBinder.php 

A lib/PHPExcel/Cell/DataType.php 

A lib/PHPExcel/Cell/DataValidation.php 

A lib/PHPExcel/Cell/DefaultValueBinder.php 

A lib/PHPExcel/Cell/Hyperlink.php 

A lib/PHPExcel/Cell/IValueBinder.php 

A lib/PHPExcel/Chart.php 

A lib/PHPExcel/Chart/Axis.php 

A lib/PHPExcel/Chart/DataSeries.php 

A lib/PHPExcel/Chart/DataSeriesValues.php 

A lib/PHPExcel/Chart/Exception.php 

A lib/PHPExcel/Chart/GridLines.php 

A lib/PHPExcel/Chart/Layout.php 

A lib/PHPExcel/Chart/Legend.php 

A lib/PHPExcel/Chart/PlotArea.php 

A lib/PHPExcel/Chart/Properties.php 

A lib/PHPExcel/Chart/Renderer/PHP Charting Libraries.txt 

A lib/PHPExcel/Chart/Renderer/jpgraph.php 

A lib/PHPExcel/Chart/Title.php 

A lib/PHPExcel/Comment.php 

A lib/PHPExcel/DocumentProperties.php 

A lib/PHPExcel/DocumentSecurity.php 

A lib/PHPExcel/Exception.php 

A lib/PHPExcel/HashTable.php 

A lib/PHPExcel/Helper/HTML.php 

A lib/PHPExcel/IComparable.php 

A lib/PHPExcel/IOFactory.php 

A lib/PHPExcel/NamedRange.php 

A lib/PHPExcel/Reader/Abstract.php 

A lib/PHPExcel/Reader/CSV.php 

A lib/PHPExcel/Reader/DefaultReadFilter.php 

A lib/PHPExcel/Reader/Excel2003XML.php 

A lib/PHPExcel/Reader/Excel2007.php 

A lib/PHPExcel/Reader/Excel2007/Chart.php 

A lib/PHPExcel/Reader/Excel2007/Theme.php 

A lib/PHPExcel/Reader/Excel5.php 

A lib/PHPExcel/Reader/Excel5/Color.php 

A lib/PHPExcel/Reader/Excel5/Color/BIFF5.php 

A lib/PHPExcel/Reader/Excel5/Color/BIFF8.php 

A lib/PHPExcel/Reader/Excel5/Color/BuiltIn.php 

A lib/PHPExcel/Reader/Excel5/ErrorCode.php 

A lib/PHPExcel/Reader/Excel5/Escher.php 

A lib/PHPExcel/Reader/Excel5/MD5.php 

A lib/PHPExcel/Reader/Excel5/RC4.php 

A lib/PHPExcel/Reader/Excel5/Style/Border.php 

A lib/PHPExcel/Reader/Excel5/Style/FillPattern.php 

A lib/PHPExcel/Reader/Exception.php 

A lib/PHPExcel/Reader/Gnumeric.php 

A lib/PHPExcel/Reader/HTML.php 

A lib/PHPExcel/Reader/IReadFilter.php 

A lib/PHPExcel/Reader/IReader.php 

A lib/PHPExcel/Reader/OOCalc.php 

A lib/PHPExcel/Reader/SYLK.php 

A lib/PHPExcel/ReferenceHelper.php 

A lib/PHPExcel/RichText.php 

A lib/PHPExcel/RichText/ITextElement.php 

A lib/PHPExcel/RichText/Run.php 

A lib/PHPExcel/RichText/TextElement.php 

A lib/PHPExcel/Settings.php 

A lib/PHPExcel/Shared/CodePage.php 

A lib/PHPExcel/Shared/Date.php 

A lib/PHPExcel/Shared/Drawing.php 

A lib/PHPExcel/Shared/Escher.php 

A lib/PHPExcel/Shared/Escher/DgContainer.php 

A lib/PHPExcel/Shared/Escher/DgContainer/SpgrContainer.php 

A lib/PHPExcel/Shared/Escher/DgContainer/SpgrContainer/SpContainer.php 

A lib/PHPExcel/Shared/Escher/DggContainer.php 

A lib/PHPExcel/Shared/Escher/DggContainer/BstoreContainer.php 

A lib/PHPExcel/Shared/Escher/DggContainer/BstoreContainer/BSE.php 

A lib/PHPExcel/Shared/Escher/DggContainer/BstoreContainer/BSE/Blip.php 

A lib/PHPExcel/Shared/Excel5.php 

A lib/PHPExcel/Shared/File.php 

A lib/PHPExcel/Shared/Font.php 

A lib/PHPExcel/Shared/JAMA/CHANGELOG.TXT 

A lib/PHPExcel/Shared/JAMA/CholeskyDecomposition.php 

A lib/PHPExcel/Shared/JAMA/EigenvalueDecomposition.php 

A lib/PHPExcel/Shared/JAMA/LUDecomposition.php 

A lib/PHPExcel/Shared/JAMA/Matrix.php 

A lib/PHPExcel/Shared/JAMA/QRDecomposition.php 

A lib/PHPExcel/Shared/JAMA/SingularValueDecomposition.php 

A lib/PHPExcel/Shared/JAMA/utils/Error.php 

A lib/PHPExcel/Shared/JAMA/utils/Maths.php 

A lib/PHPExcel/Shared/OLE.php 

A lib/PHPExcel/Shared/OLE/ChainedBlockStream.php 

A lib/PHPExcel/Shared/OLE/PPS.php 

A lib/PHPExcel/Shared/OLE/PPS/File.php 

A lib/PHPExcel/Shared/OLE/PPS/Root.php 

A lib/PHPExcel/Shared/OLERead.php 

A lib/PHPExcel/Shared/PCLZip/gnu-lgpl.txt 

A lib/PHPExcel/Shared/PCLZip/pclzip.lib.php 

A lib/PHPExcel/Shared/PCLZip/readme.txt 

A lib/PHPExcel/Shared/PasswordHasher.php 

A lib/PHPExcel/Shared/String.php 

A lib/PHPExcel/Shared/TimeZone.php 

A lib/PHPExcel/Shared/XMLWriter.php 

A lib/PHPExcel/Shared/ZipArchive.php 

A lib/PHPExcel/Shared/ZipStreamWrapper.php 

A lib/PHPExcel/Shared/trend/bestFitClass.php 

A lib/PHPExcel/Shared/trend/exponentialBestFitClass.php 

A lib/PHPExcel/Shared/trend/linearBestFitClass.php 

A lib/PHPExcel/Shared/trend/logarithmicBestFitClass.php 

A lib/PHPExcel/Shared/trend/polynomialBestFitClass.php 

A lib/PHPExcel/Shared/trend/powerBestFitClass.php 

A lib/PHPExcel/Shared/trend/trendClass.php 

A lib/PHPExcel/Style.php 

A lib/PHPExcel/Style/Alignment.php 

A lib/PHPExcel/Style/Border.php 

A lib/PHPExcel/Style/Borders.php 

A lib/PHPExcel/Style/Color.php 

A lib/PHPExcel/Style/Conditional.php 

A lib/PHPExcel/Style/Fill.php 

A lib/PHPExcel/Style/Font.php 

A lib/PHPExcel/Style/NumberFormat.php 

A lib/PHPExcel/Style/Protection.php 

A lib/PHPExcel/Style/Supervisor.php 

A lib/PHPExcel/Worksheet.php 

A lib/PHPExcel/Worksheet/AutoFilter.php 

A lib/PHPExcel/Worksheet/AutoFilter/Column.php 

A lib/PHPExcel/Worksheet/AutoFilter/Column/Rule.php 

A lib/PHPExcel/Worksheet/ColumnDimension.php 

A lib/PHPExcel/Worksheet/ColumnIterator.php 

A lib/PHPExcel/Worksheet/Dimension.php 

A lib/PHPExcel/Worksheet/Drawing.php 

A lib/PHPExcel/Worksheet/Drawing/Shadow.php 

A lib/PHPExcel/Worksheet/HeaderFooter.php 

A lib/PHPExcel/Worksheet/HeaderFooterDrawing.php 

A lib/PHPExcel/Worksheet/MemoryDrawing.php 

A lib/PHPExcel/Worksheet/PageMargins.php 

A lib/PHPExcel/Worksheet/PageSetup.php 

A lib/PHPExcel/Worksheet/Protection.php 

A lib/PHPExcel/Worksheet/Row.php 

A lib/PHPExcel/Worksheet/RowCellIterator.php 

A lib/PHPExcel/Worksheet/RowDimension.php 

A lib/PHPExcel/Worksheet/RowIterator.php 

A lib/PHPExcel/Worksheet/SheetView.php 

A lib/PHPExcel/WorksheetIterator.php 

A lib/PHPExcel/Writer/Abstract.php 

A lib/PHPExcel/Writer/CSV.php 

A lib/PHPExcel/Writer/Excel2007.php 

A lib/PHPExcel/Writer/Excel2007/Chart.php 

A lib/PHPExcel/Writer/Excel2007/Comments.php 

A lib/PHPExcel/Writer/Excel2007/ContentTypes.php 

A lib/PHPExcel/Writer/Excel2007/DocProps.php 

A lib/PHPExcel/Writer/Excel2007/Drawing.php 

A lib/PHPExcel/Writer/Excel2007/Rels.php 

A lib/PHPExcel/Writer/Excel2007/RelsRibbon.php 

A lib/PHPExcel/Writer/Excel2007/RelsVBA.php 

A lib/PHPExcel/Writer/Excel2007/StringTable.php 

A lib/PHPExcel/Writer/Excel2007/Style.php 

A lib/PHPExcel/Writer/Excel2007/Theme.php 

A lib/PHPExcel/Writer/Excel2007/Workbook.php 

A lib/PHPExcel/Writer/Excel2007/Worksheet.php 

A lib/PHPExcel/Writer/Excel2007/WriterPart.php 

A lib/PHPExcel/Writer/Excel5.php 

A lib/PHPExcel/Writer/Excel5/BIFFwriter.php 

A lib/PHPExcel/Writer/Excel5/Escher.php 

A lib/PHPExcel/Writer/Excel5/Font.php 

A lib/PHPExcel/Writer/Excel5/Parser.php 

A lib/PHPExcel/Writer/Excel5/Workbook.php 

A lib/PHPExcel/Writer/Excel5/Worksheet.php 

A lib/PHPExcel/Writer/Excel5/Xf.php 

A lib/PHPExcel/Writer/Exception.php 

A lib/PHPExcel/Writer/HTML.php 

A lib/PHPExcel/Writer/IWriter.php 

A lib/PHPExcel/Writer/OpenDocument.php 

A lib/PHPExcel/Writer/OpenDocument/Cell/Comment.php 

A lib/PHPExcel/Writer/OpenDocument/Content.php 

A lib/PHPExcel/Writer/OpenDocument/Meta.php 

A lib/PHPExcel/Writer/OpenDocument/MetaInf.php 

A lib/PHPExcel/Writer/OpenDocument/Mimetype.php 

A lib/PHPExcel/Writer/OpenDocument/Settings.php 

A lib/PHPExcel/Writer/OpenDocument/Styles.php 

A lib/PHPExcel/Writer/OpenDocument/Thumbnails.php 

A lib/PHPExcel/Writer/OpenDocument/WriterPart.php 

A lib/PHPExcel/Writer/PDF.php 

A lib/PHPExcel/Writer/PDF/Core.php 

A lib/PHPExcel/Writer/PDF/DomPDF.php 

A lib/PHPExcel/Writer/PDF/mPDF.php 

A lib/PHPExcel/Writer/PDF/tcPDF.php 

A lib/PHPExcel/locale/bg/config 

A lib/PHPExcel/locale/cs/config 

A lib/PHPExcel/locale/cs/functions 

A lib/PHPExcel/locale/da/config 

A lib/PHPExcel/locale/da/functions 

A lib/PHPExcel/locale/de/config 

A lib/PHPExcel/locale/de/functions 

A lib/PHPExcel/locale/en/uk/config 

A lib/PHPExcel/locale/es/config 

A lib/PHPExcel/locale/es/functions 

A lib/PHPExcel/locale/fi/config 

A lib/PHPExcel/locale/fi/functions 

A lib/PHPExcel/locale/fr/config 

A lib/PHPExcel/locale/fr/functions 

A lib/PHPExcel/locale/hu/config 

A lib/PHPExcel/locale/hu/functions 

A lib/PHPExcel/locale/it/config 

A lib/PHPExcel/locale/it/functions 

A lib/PHPExcel/locale/nl/config 

A lib/PHPExcel/locale/nl/functions 

A lib/PHPExcel/locale/no/config 

A lib/PHPExcel/locale/no/functions 

A lib/PHPExcel/locale/pl/config 

A lib/PHPExcel/locale/pl/functions 

A lib/PHPExcel/locale/pt/br/config 

A lib/PHPExcel/locale/pt/br/functions 

A lib/PHPExcel/locale/pt/config 

A lib/PHPExcel/locale/pt/functions 

A lib/PHPExcel/locale/ru/config 

A lib/PHPExcel/locale/ru/functions 

A lib/PHPExcel/locale/sv/config 

A lib/PHPExcel/locale/sv/functions 

A lib/PHPExcel/locale/tr/config 

A lib/PHPExcel/locale/tr/functions 

14906d5 미완료 주문에서 변수 누락 ( 왕대인님 제보 ) 

M adm/shop_admin/inorderformupdate.php 

9c49d06 쿠폰존 관리 오타 수정 

M adm/shop_admin/couponzonelist.php 

ba48171 네이버페이 장바구니 배송비 관련 수정 

M shop/naverpay/naverpay_order.php 

20f658f 오타 수정 (왕대인님 제보) 

M adm/board_list.php 

M adm/visit_date.php 

M adm/visit_month.php 

M adm/visit_search.php 

119fe46 오타 수정 (왕대인님 제보) 

M adm/shop_admin/optionstocklist.php 

ed957cf LFI to RCE 취약점 수정 

M adm/contentformupdate.php 

M adm/qa_config_update.php 

M bbs/content.php 

M bbs/qahead.php 

M bbs/qatail.php 

M lib/common.lib.php 

M lib/thumbnail.lib.php 

cd7c056 주문 페이지 오타 수정 

M adm/shop_admin/orderform.php 

5edf093 주문내역 오류 수정 

M adm/shop_admin/ajax.orderitem.php 

83d13c5 부분옵션 검색 관련 부분 수정 

M css/mobile_shop.css 

M shop/itemoption.php


MENU