• 목록

• 페이스북 공유
• 트위터 공유
• 

# 변경된 사항

버전 5.6.27 수정

https://github.com/gnuboard/gnuboard5/commit/5fc1c3bc27e4ee58e84d3ebfd5feb86b83852fc5

data/ 디렉터리 git 추적 제외 (.htaccess 인덱스 제거)

https://github.com/gnuboard/gnuboard5/commit/d707c5abac72a95473df9bdf9bf7a5b3b5244e45

NHN KCP 가상계좌 발급 응답 코드 V000 허용

https://github.com/gnuboard/gnuboard5/commit/eeea46cb699b4226bfe5ee2ba9aa810c2063a478

주소 jibeon 값 화이트리스트에 'J' 추가

https://github.com/gnuboard/gnuboard5/commit/669cce70118981d0bd7519c18c104fea672212d6

미완료 주문 목록 PG 표시에 토스페이먼츠/NICEPAY 케이스 추가

https://github.com/gnuboard/gnuboard5/commit/ee8b57eb1368bc8933a0bfa04421a3dcc99cf54d

Fix PHP 5.2 compatibility issues

https://github.com/gnuboard/gnuboard5/commit/c927925a0532ef80ca56b7c63b78f9b61fb250cd

Fix PHP legacy array syntax

https://github.com/gnuboard/gnuboard5/commit/d914a7843d7212e84586d1f7678287d281373ad3

NHN_KCP 가상계좌 테스트 url 변경

https://github.com/gnuboard/gnuboard5/commit/c04591e24a849bfa79f998357414530b8764d9ea

[security] 엑셀/CSV 다운로드 출력값 안전 처리

https://github.com/gnuboard/gnuboard5/commit/a6fbbe6ad2b784c5bdd99677c79650fb7e1ac4c7

[security]KVE-2026-0882 race condition 잔액 부족 시 결제 취소 처리로 변경

https://github.com/gnuboard/gnuboard5/commit/4c00c6000634b1c8cc42c8b548337c6ac54418ca

[security]KVE-2026-0882 주문 포인트 차감 Race Condition (Double Spend) 수정

https://github.com/gnuboard/gnuboard5/commit/56b1958d373e5dca1c47405a8c398536155f619e

[security] ORDER BY sst/sod 화이트리스트 누락 Blind SQL Injection 수정

https://github.com/gnuboard/gnuboard5/commit/6b2f9e094c9834ee0fd4456f2be3333b47ea7f3d

[KVE-2026-0876] 모바일 상품 리스트 sort 파라미터 Blind SQL Injection 수정

https://github.com/gnuboard/gnuboard5/commit/a781b4aef39e297c4f86ce3ab70b4f8d756ddb7c

[KVE-2026-0869] 인스톨러 관리자 입력값 SQL Injection 수정

https://github.com/gnuboard/gnuboard5/commit/8be4476f56ea333fe1c1eb23fb98ff869bf450d1

[security]KVE-2026-0859 KCP CLI Windows 환경 명령 인젝션(RCE) 수정

https://github.com/gnuboard/gnuboard5/commit/59d0b3c19ccc0b5cc6c344a72ba897cf77176456

[security] 관리자 영역 권한 검증 누락 및 CSRF 토큰 누락 수정

https://github.com/gnuboard/gnuboard5/commit/f4f8c57a74d743fd3cf0ca4f02fcd8658d2b824e

[security] 인스톨러 g5_shop_prefix PHP 코드 인젝션(RCE) 수정

https://github.com/gnuboard/gnuboard5/commit/d5619707bcaffc967081989830a371a2520691e5

[security]KVE-2026-0822 댓글 수정 textarea wr_content 미이스케이프 Stored XSS 수정

https://github.com/gnuboard/gnuboard5/commit/9e7465319bcdd09258c1c7bb80c679befd2a50ce

[security]KVE-2026-0795 게시물 이동/복사 시 대상 게시판 권한 검증 누락 수정

https://github.com/gnuboard/gnuboard5/commit/f1f2150c67e497e7cef3c5547196d45d90c2274f

[security]KVE-2026-0787 alert() JavaScript 이스케이프 누락 Stored XSS 수정

https://github.com/gnuboard/gnuboard5/commit/3de722d3df9ef3945dd78a9121a18e7f24f707a7

[security]KVE-2026-0711 PG 리턴 처리 POST 키 이름 Reflected XSS 수정

https://github.com/gnuboard/gnuboard5/commit/7119b4f61289a32024193b3346d7f5d04078b52c

[security]KVE-2026-0687 쇼핑몰 쿠폰 다운로드 TOCTOU Race Condition 수정

https://github.com/gnuboard/gnuboard5/commit/efaefbbd0eb3334aba16ef729bac62cb82aeed83

[security]XSS 취약점 및 token 추가

https://github.com/gnuboard/gnuboard5/commit/b12bf551ec2ec2dc69399aa3b83e4c785d941bdb