영카트 5.1.17

** 수정내역 **


XSS 취약점을 변희준님, 최정수님이 한국인터넷진흥원통해 알려주셨습니다.


패치 후 DB 필드 추가를 위해 관리자 로그인 후 orderupgrade.php, adm/shop_admin/configform.php
파일을 각각 실행해 주시기 바랍니다.


https://github.com/gnuboard/youngcart5/commit/9095c5ea6e9d7cb03c1449b181ea19e2906c25e5
https://github.com/gnuboard/youngcart5/commit/58c6d0c4ec3eb3d98bcad044a8941dbad0d2b036
https://github.com/gnuboard/youngcart5/commit/50aeaf1a77f3e44f0a362c5a57747e28f84035b3
https://github.com/gnuboard/youngcart5/commit/e581da7198e1a2bebcd8aa38a7887808ea2be094
https://github.com/gnuboard/youngcart5/commit/871700f908fb6ffc6070959ae02c6b56f49f3bf5
https://github.com/gnuboard/youngcart5/commit/4af90d2b8c6259d41382b134fb2ac11ccc8df57f
https://github.com/gnuboard/youngcart5/commit/ebd554d36767df634a3cb43f406ff3090028eaca
https://github.com/gnuboard/youngcart5/commit/5f1882f9a88fff099b909d696d9652e47969afa3
https://github.com/gnuboard/youngcart5/commit/40861ea54de9232330c8e267400b676fa5489a4d
https://github.com/gnuboard/youngcart5/commit/363cc1f05b31b9689790605921570c00d14d5ab7
https://github.com/gnuboard/youngcart5/commit/506e7485a7880d88c220c71a1ee933f1269e2f61
https://github.com/gnuboard/youngcart5/commit/d56d1124d8718e36b85652d177f9f7858045e0b0
https://github.com/gnuboard/youngcart5/commit/cdcb5ac0a84a021f9b15510b7c16ffdfd629cf4a
https://github.com/gnuboard/youngcart5/commit/ea249d26c8050f40aec8035d78053e171b1f4535
https://github.com/gnuboard/youngcart5/commit/d3aba96a4030991bc51b1783cd554fbfc36b5549
https://github.com/gnuboard/youngcart5/commit/051a54484cb3f8d120c015f25eddb07630d661e4
https://github.com/gnuboard/youngcart5/commit/fe130fb27d32fb25a0f4167158c518fbbff7373e
https://github.com/gnuboard/youngcart5/commit/6495f339c15c816caef3b7a4d4c5be4ff9cb0073
https://github.com/gnuboard/youngcart5/commit/260cf8754a0c0fb2f265405abc4f5dbf7c3bd85d
https://github.com/gnuboard/youngcart5/commit/8065c0dad108dab8aa7c32338532ccaf7f6b1325
https://github.com/gnuboard/youngcart5/commit/ff9f9f2e8be919dc1bb22415869131f0af687ee0
https://github.com/gnuboard/youngcart5/commit/0a3f3896def36a3f87cf0c92ffe25429fa763a7d
https://github.com/gnuboard/youngcart5/commit/01ecdf72fe8dd6e64122f10413bb930e3b743afa
https://github.com/gnuboard/youngcart5/commit/844b283e9b2018d5bb6b49f6c05a7ae03f558403
https://github.com/gnuboard/youngcart5/commit/0f605338106572d07d1f09009f9242ed9dd1b51f
https://github.com/gnuboard/youngcart5/commit/e3d85d4946a45bf7389fac8dbbc1ef99e9d7d396


15508d0 5.1.17 버전변경
M config.php
7568ba3 이니시스 결제모듈 JS 파일 로드 코드 수정
M shop/inicis/orderform.1.php
M shop/settle_inicis.inc.php
74cedf5 쇼핑몰설정 NHN KCP 사명변경
M adm/shop_admin/configform.php
5786f14 Merge branch 'g5'
2a6e2c0 기본환경설정 NHN KCP 사명변경
M adm/config_form.php
dc26294 Merge branch 'g5'
e22b4ec 1:1문의 파일업로드 분류 체크 추가
M bbs/qawrite_update.php
71efd5c 파일 업로드 개수 코드 수정
M bbs/write.php
M mobile/skin/board/basic/write.skin.php
M mobile/skin/board/gallery/write.skin.php
M skin/board/basic/write.skin.php
M skin/board/gallery/write.skin.php
M theme/basic/mobile/skin/board/basic/write.skin.php
M theme/basic/mobile/skin/board/gallery/write.skin.php
M theme/basic/skin/board/basic/write.skin.php
M theme/basic/skin/board/gallery/write.skin.php
dfb5020 Merge branch 'g5'
b4a83c1 게시글 카테고리 체크 수정
M bbs/write_update.php
ee35ce9 파일 업로드 개수 체크 추가
M bbs/write.php
M bbs/write_update.php
M mobile/skin/board/basic/write.skin.php
M mobile/skin/board/gallery/write.skin.php
M skin/board/basic/write.skin.php
M skin/board/gallery/write.skin.php
M theme/basic/mobile/skin/board/basic/write.skin.php
M theme/basic/mobile/skin/board/gallery/write.skin.php
M theme/basic/skin/board/basic/write.skin.php
M theme/basic/skin/board/gallery/write.skin.php
05c1f1b Merge branch 'g5'
7a8a4fe 폼메일에서의 이메일주소 노출 수정
M bbs/formmail.php
M bbs/formmail_send.php
M lib/common.lib.php
0c6e13e 옵션 출력 코드 수정
M lib/shop.lib.php
23b996d XSS 취약점(16-320) 수정
M adm/shop_admin/orderform.php
M mobile/shop/orderinquiryview.php
M shop/orderinquiryview.php
d73bd89 XSS 취약점(16-315) 수정
M adm/shop_admin/orderform.php
2e36c0a 1:1문의 이메일 체크 수정
M bbs/qawrite_update.php
71b403b 스크랩 게시글 체크 추가
M bbs/scrap_popin_update.php
c5d22ac 1:1문의 삭제 오류 수정
M bbs/qadelete.php
81671ab 이메일인증 프로세스 개선
M adm/member_form.php
M bbs/email_certify.php
M bbs/register_email_update.php
M bbs/register_form_update.php
e912fae Merge branch 'g5'
da1b302 댓글 등록 오류 수정
M bbs/write_comment_update.php
77ba05b Merge branch 'g5'
f1cd96d 미완료주문 처리 추가
M adm/admin.menu400.shop_1of2.php
M adm/css/admin.css
A adm/shop_admin/inorderform.php
A adm/shop_admin/inorderformupdate.php
A adm/shop_admin/inorderlist.php
A adm/shop_admin/inorderlistdelete.php
M install/gnuboard5shop.sql
M lib/shop.lib.php
M orderupgrade.php
M shop/ajax.orderdatasave.php
3f70685 비밀글 등록 버그 수정
M bbs/write_update.php
b38e0f1 이니시스 결제 필드 추가
M adm/shop_admin/configform.php
M install/gnuboard5shop.sql
c238525 개인결제 이니시스 모듈 오류 수정
M shop/inicis/makesignature.php
M shop/orderform.php
M shop/personalpayform.php
M shop/personalpayform.sub.php
58306b6 #397 관리자 주문내역 테스트 글자컬러
M adm/css/admin.css
2bfbfba #397 관리자 테스트 주문 주의문구 수정
M adm/css/admin.css
M adm/shop_admin/orderform.php
4c9ac8b #397 테스트주문 표시 추가
M adm/shop_admin/orderform.php
M adm/shop_admin/orderlist.php
M mobile/shop/orderformupdate.php
M orderupgrade.php
M shop/orderformupdate.php
95b60db 이니시스 웹표준 결제모듈 적용
M adm/shop_admin/configform.php
M adm/shop_admin/configformupdate.php
A shop/inicis/INIStdPayResult.php
A shop/inicis/INIStdPayReturn.php
A shop/inicis/close.php
D shop/inicis/encryptdata.php
M shop/inicis/inipay_result.php
A shop/inicis/libs/CreateIdModule.php
A shop/inicis/libs/HttpClient.php
M shop/inicis/libs/INICls.php
M shop/inicis/libs/INIDFN.php
M shop/inicis/libs/INILib.php
M shop/inicis/libs/INISoc.php
A shop/inicis/libs/INIStdPayUtil.php
M shop/inicis/libs/INIXml.php
A shop/inicis/libs/INIpayStdMakeSignature.php
A shop/inicis/libs/JSON.php
A shop/inicis/libs/json_lib.php
A shop/inicis/libs/sha256.inc.php
A shop/inicis/makesignature.php
M shop/inicis/orderform.1.php
M shop/inicis/orderform.2.php
M shop/inicis/orderform.3.php
A shop/inicis/popup.php
M shop/orderform.php
M shop/orderform.sub.php
M shop/orderformupdate.php
M shop/settle_inicis.inc.php
39dae2e KCP 웹표준 모듈 적용
M shop/kcp/orderform.1.php
M shop/kcp/orderform.2.php
M shop/kcp/orderform.3.php
M shop/kcp/pp_ax_hub.php
M shop/kcp/pp_ax_hub_cancel.php
M shop/orderform.php
M shop/orderform.sub.php
M shop/personalpayform.sub.php
M shop/settle_kcp.inc.php




수정내역이 존재하지만 패치파일에 포함되어 있지않은 파일은 복원됐기 때문입니다.