[보안패치] 영카트 5.2.7

** 수정내역 **

LFI to RCE 취약점 수정 ( debukuk 님이 제보해 주셨습니다. )
원격코드 실행 취약점(17-00160) 수정 ( 한국인터넷진흥원에서 알려주셨습니다. )
원본 이미지 비율 유지하며 썸네일 생성 ( 편리님이 소스 공개 해 주셨습니다. )
cheditor5 소스 수정 ( ie11 에서 이미지 업로드가 되지 않는 문제점을 고쳤습니다. )

부분옵션 검색 관련 부분 수정 ( dnxogk 님이 알려주셨습니다. )
주문내역 오류 수정 및 오타 수정 ( 왕대인님이 제보해 주셨습니다. )
미완료 주문에서 변수 누락 ( 왕대인님이 제보해 주셨습니다. )
PHP 5.2.0 이상 버전에서 PHPExcel 라이브러리 적용을 했습니다.
상품 사용후기에 관리자가 추가로 답변할수 있도록 수정되었습니다.



https://github.com/gnuboard/youngcart5/commit/86e52ce756b1a7f03e30a84efd6a830d59c9bf60
https://github.com/gnuboard/youngcart5/commit/cf6110760e7085e93b14a48f96cabaae7f7529bd
https://github.com/gnuboard/youngcart5/commit/819246875991539aadd0daaca6de7394cfda7384
https://github.com/gnuboard/youngcart5/commit/6298116cb1aece139fae9488e3189486be8e22b2
https://github.com/gnuboard/youngcart5/commit/5fc96bdeb1234462ed7b5b49020bcc29388cbbb9
https://github.com/gnuboard/youngcart5/commit/47017c7adb085f793aeb467e23779652c2918b9a
https://github.com/gnuboard/youngcart5/commit/a78afd86f5d69eab0d4ed2053c645ce3d4dd9563
https://github.com/gnuboard/youngcart5/commit/b1b273015477c415ec96952bb93dc85fa12fa74d
https://github.com/gnuboard/youngcart5/commit/b0e18bc266cb731b100388eca924e9be9abea0e5
https://github.com/gnuboard/youngcart5/commit/ef0680c22cd75575c4d2048b63445f47a1ecc393
https://github.com/gnuboard/youngcart5/commit/34537190cba008cc1df8c92fdb05cf1f1487f8f2
https://github.com/gnuboard/youngcart5/commit/4d9180f9dc8895bc6476e9de345098e5aac18a66
https://github.com/gnuboard/youngcart5/commit/5df2808d243a6bc721d21f15f370f2a9e57fd0d1
https://github.com/gnuboard/youngcart5/commit/2287179db18fec75b5ea1f23060d41e263a0ad45
https://github.com/gnuboard/youngcart5/commit/20935b53dfc81b841b674d01f907800ddc9a5963
https://github.com/gnuboard/youngcart5/commit/7fcaa01d3b305a419cf165ae47edf4ecfae13677
https://github.com/gnuboard/youngcart5/commit/9e54285ff648212b07a7677457ee95be35e065f7



9e652ac 원본비율에 맟춰 리사이트 추가
M lib/shop.lib.php
08518d0 5.2.7 버전변경
08b8d1e 썸네일 파일 수정
M lib/thumbnail.lib.php
c2a2a11 5.2.7 버전변경
M config.php
54abbdd cheditor 소스 수정
M head.sub.php
M plugin/editor/cheditor5/popup/js/image.html5.js
e88a7db 네이버 페이 장바구니 소스 수정
M shop/naverpay/naverpay_order.php
393ed70 사용후기에 관리자의 답변 달기 추가
M adm/shop_admin/itemuseform.php
M adm/shop_admin/itemuseformupdate.php
M css/mobile_shop.css
A mobile/shop/img/use_reply.png
A mobile/skin/shop/basic/img/use_reply.png
M mobile/skin/shop/basic/itemuse.skin.php
M mobile/skin/shop/basic/itemuselist.skin.php
M mobile/skin/shop/basic/style.css
A skin/shop/basic/img/use_reply.png
M skin/shop/basic/itemuse.skin.php
M skin/shop/basic/itemuselist.skin.php
M skin/shop/basic/style.css
M theme/basic/css/mobile_shop.css
A theme/basic/mobile/shop/img/use_reply.png
A theme/basic/mobile/skin/shop/basic/img/use_reply.png
M theme/basic/mobile/skin/shop/basic/itemuse.skin.php
M theme/basic/mobile/skin/shop/basic/itemuselist.skin.php
M theme/basic/mobile/skin/shop/basic/style.css
A theme/basic/skin/shop/basic/img/use_reply.png
M theme/basic/skin/shop/basic/itemuse.skin.php
M theme/basic/skin/shop/basic/itemuselist.skin.php
M theme/basic/skin/shop/basic/style.css
c6425ad 원격코드 실행 취약점(17-00160) 수정
M adm/board_form_update.php
M adm/sms_admin/_common.php
M bbs/board_head.php
M bbs/board_tail.php
M plugin/htmlpurifier/safeiframe.txt
4cdd64b PHP 5.2.0 이상 버전에서 PHPExcel 라이브러리 적용:wq
M adm/shop_admin/orderdeliveryexcel.php
A lib/PHPExcel.php
A lib/PHPExcel/Autoloader.php
A lib/PHPExcel/CachedObjectStorage/APC.php
A lib/PHPExcel/CachedObjectStorage/CacheBase.php
A lib/PHPExcel/CachedObjectStorage/DiscISAM.php
A lib/PHPExcel/CachedObjectStorage/ICache.php
A lib/PHPExcel/CachedObjectStorage/Igbinary.php
A lib/PHPExcel/CachedObjectStorage/Memcache.php
A lib/PHPExcel/CachedObjectStorage/Memory.php
A lib/PHPExcel/CachedObjectStorage/MemoryGZip.php
A lib/PHPExcel/CachedObjectStorage/MemorySerialized.php
A lib/PHPExcel/CachedObjectStorage/PHPTemp.php
A lib/PHPExcel/CachedObjectStorage/SQLite.php
A lib/PHPExcel/CachedObjectStorage/SQLite3.php
A lib/PHPExcel/CachedObjectStorage/Wincache.php
A lib/PHPExcel/CachedObjectStorageFactory.php
A lib/PHPExcel/CalcEngine/CyclicReferenceStack.php
A lib/PHPExcel/CalcEngine/Logger.php
A lib/PHPExcel/Calculation.php
A lib/PHPExcel/Calculation/Database.php
A lib/PHPExcel/Calculation/DateTime.php
A lib/PHPExcel/Calculation/Engineering.php
A lib/PHPExcel/Calculation/Exception.php
A lib/PHPExcel/Calculation/ExceptionHandler.php
A lib/PHPExcel/Calculation/Financial.php
A lib/PHPExcel/Calculation/FormulaParser.php
A lib/PHPExcel/Calculation/FormulaToken.php
A lib/PHPExcel/Calculation/Function.php
A lib/PHPExcel/Calculation/Functions.php
A lib/PHPExcel/Calculation/Logical.php
A lib/PHPExcel/Calculation/LookupRef.php
A lib/PHPExcel/Calculation/MathTrig.php
A lib/PHPExcel/Calculation/Statistical.php
A lib/PHPExcel/Calculation/TextData.php
A lib/PHPExcel/Calculation/Token/Stack.php
A lib/PHPExcel/Calculation/functionlist.txt
A lib/PHPExcel/Cell.php
A lib/PHPExcel/Cell/AdvancedValueBinder.php
A lib/PHPExcel/Cell/DataType.php
A lib/PHPExcel/Cell/DataValidation.php
A lib/PHPExcel/Cell/DefaultValueBinder.php
A lib/PHPExcel/Cell/Hyperlink.php
A lib/PHPExcel/Cell/IValueBinder.php
A lib/PHPExcel/Chart.php
A lib/PHPExcel/Chart/Axis.php
A lib/PHPExcel/Chart/DataSeries.php
A lib/PHPExcel/Chart/DataSeriesValues.php
A lib/PHPExcel/Chart/Exception.php
A lib/PHPExcel/Chart/GridLines.php
A lib/PHPExcel/Chart/Layout.php
A lib/PHPExcel/Chart/Legend.php
A lib/PHPExcel/Chart/PlotArea.php
A lib/PHPExcel/Chart/Properties.php
A lib/PHPExcel/Chart/Renderer/PHP Charting Libraries.txt
A lib/PHPExcel/Chart/Renderer/jpgraph.php
A lib/PHPExcel/Chart/Title.php
A lib/PHPExcel/Comment.php
A lib/PHPExcel/DocumentProperties.php
A lib/PHPExcel/DocumentSecurity.php
A lib/PHPExcel/Exception.php
A lib/PHPExcel/HashTable.php
A lib/PHPExcel/Helper/HTML.php
A lib/PHPExcel/IComparable.php
A lib/PHPExcel/IOFactory.php
A lib/PHPExcel/NamedRange.php
A lib/PHPExcel/Reader/Abstract.php
A lib/PHPExcel/Reader/CSV.php
A lib/PHPExcel/Reader/DefaultReadFilter.php
A lib/PHPExcel/Reader/Excel2003XML.php
A lib/PHPExcel/Reader/Excel2007.php
A lib/PHPExcel/Reader/Excel2007/Chart.php
A lib/PHPExcel/Reader/Excel2007/Theme.php
A lib/PHPExcel/Reader/Excel5.php
A lib/PHPExcel/Reader/Excel5/Color.php
A lib/PHPExcel/Reader/Excel5/Color/BIFF5.php
A lib/PHPExcel/Reader/Excel5/Color/BIFF8.php
A lib/PHPExcel/Reader/Excel5/Color/BuiltIn.php
A lib/PHPExcel/Reader/Excel5/ErrorCode.php
A lib/PHPExcel/Reader/Excel5/Escher.php
A lib/PHPExcel/Reader/Excel5/MD5.php
A lib/PHPExcel/Reader/Excel5/RC4.php
A lib/PHPExcel/Reader/Excel5/Style/Border.php
A lib/PHPExcel/Reader/Excel5/Style/FillPattern.php
A lib/PHPExcel/Reader/Exception.php
A lib/PHPExcel/Reader/Gnumeric.php
A lib/PHPExcel/Reader/HTML.php
A lib/PHPExcel/Reader/IReadFilter.php
A lib/PHPExcel/Reader/IReader.php
A lib/PHPExcel/Reader/OOCalc.php
A lib/PHPExcel/Reader/SYLK.php
A lib/PHPExcel/ReferenceHelper.php
A lib/PHPExcel/RichText.php
A lib/PHPExcel/RichText/ITextElement.php
A lib/PHPExcel/RichText/Run.php
A lib/PHPExcel/RichText/TextElement.php
A lib/PHPExcel/Settings.php
A lib/PHPExcel/Shared/CodePage.php
A lib/PHPExcel/Shared/Date.php
A lib/PHPExcel/Shared/Drawing.php
A lib/PHPExcel/Shared/Escher.php
A lib/PHPExcel/Shared/Escher/DgContainer.php
A lib/PHPExcel/Shared/Escher/DgContainer/SpgrContainer.php
A lib/PHPExcel/Shared/Escher/DgContainer/SpgrContainer/SpContainer.php
A lib/PHPExcel/Shared/Escher/DggContainer.php
A lib/PHPExcel/Shared/Escher/DggContainer/BstoreContainer.php
A lib/PHPExcel/Shared/Escher/DggContainer/BstoreContainer/BSE.php
A lib/PHPExcel/Shared/Escher/DggContainer/BstoreContainer/BSE/Blip.php
A lib/PHPExcel/Shared/Excel5.php
A lib/PHPExcel/Shared/File.php
A lib/PHPExcel/Shared/Font.php
A lib/PHPExcel/Shared/JAMA/CHANGELOG.TXT
A lib/PHPExcel/Shared/JAMA/CholeskyDecomposition.php
A lib/PHPExcel/Shared/JAMA/EigenvalueDecomposition.php
A lib/PHPExcel/Shared/JAMA/LUDecomposition.php
A lib/PHPExcel/Shared/JAMA/Matrix.php
A lib/PHPExcel/Shared/JAMA/QRDecomposition.php
A lib/PHPExcel/Shared/JAMA/SingularValueDecomposition.php
A lib/PHPExcel/Shared/JAMA/utils/Error.php
A lib/PHPExcel/Shared/JAMA/utils/Maths.php
A lib/PHPExcel/Shared/OLE.php
A lib/PHPExcel/Shared/OLE/ChainedBlockStream.php
A lib/PHPExcel/Shared/OLE/PPS.php
A lib/PHPExcel/Shared/OLE/PPS/File.php
A lib/PHPExcel/Shared/OLE/PPS/Root.php
A lib/PHPExcel/Shared/OLERead.php
A lib/PHPExcel/Shared/PCLZip/gnu-lgpl.txt
A lib/PHPExcel/Shared/PCLZip/pclzip.lib.php
A lib/PHPExcel/Shared/PCLZip/readme.txt
A lib/PHPExcel/Shared/PasswordHasher.php
A lib/PHPExcel/Shared/String.php
A lib/PHPExcel/Shared/TimeZone.php
A lib/PHPExcel/Shared/XMLWriter.php
A lib/PHPExcel/Shared/ZipArchive.php
A lib/PHPExcel/Shared/ZipStreamWrapper.php
A lib/PHPExcel/Shared/trend/bestFitClass.php
A lib/PHPExcel/Shared/trend/exponentialBestFitClass.php
A lib/PHPExcel/Shared/trend/linearBestFitClass.php
A lib/PHPExcel/Shared/trend/logarithmicBestFitClass.php
A lib/PHPExcel/Shared/trend/polynomialBestFitClass.php
A lib/PHPExcel/Shared/trend/powerBestFitClass.php
A lib/PHPExcel/Shared/trend/trendClass.php
A lib/PHPExcel/Style.php
A lib/PHPExcel/Style/Alignment.php
A lib/PHPExcel/Style/Border.php
A lib/PHPExcel/Style/Borders.php
A lib/PHPExcel/Style/Color.php
A lib/PHPExcel/Style/Conditional.php
A lib/PHPExcel/Style/Fill.php
A lib/PHPExcel/Style/Font.php
A lib/PHPExcel/Style/NumberFormat.php
A lib/PHPExcel/Style/Protection.php
A lib/PHPExcel/Style/Supervisor.php
A lib/PHPExcel/Worksheet.php
A lib/PHPExcel/Worksheet/AutoFilter.php
A lib/PHPExcel/Worksheet/AutoFilter/Column.php
A lib/PHPExcel/Worksheet/AutoFilter/Column/Rule.php
A lib/PHPExcel/Worksheet/ColumnDimension.php
A lib/PHPExcel/Worksheet/ColumnIterator.php
A lib/PHPExcel/Worksheet/Dimension.php
A lib/PHPExcel/Worksheet/Drawing.php
A lib/PHPExcel/Worksheet/Drawing/Shadow.php
A lib/PHPExcel/Worksheet/HeaderFooter.php
A lib/PHPExcel/Worksheet/HeaderFooterDrawing.php
A lib/PHPExcel/Worksheet/MemoryDrawing.php
A lib/PHPExcel/Worksheet/PageMargins.php
A lib/PHPExcel/Worksheet/PageSetup.php
A lib/PHPExcel/Worksheet/Protection.php
A lib/PHPExcel/Worksheet/Row.php
A lib/PHPExcel/Worksheet/RowCellIterator.php
A lib/PHPExcel/Worksheet/RowDimension.php
A lib/PHPExcel/Worksheet/RowIterator.php
A lib/PHPExcel/Worksheet/SheetView.php
A lib/PHPExcel/WorksheetIterator.php
A lib/PHPExcel/Writer/Abstract.php
A lib/PHPExcel/Writer/CSV.php
A lib/PHPExcel/Writer/Excel2007.php
A lib/PHPExcel/Writer/Excel2007/Chart.php
A lib/PHPExcel/Writer/Excel2007/Comments.php
A lib/PHPExcel/Writer/Excel2007/ContentTypes.php
A lib/PHPExcel/Writer/Excel2007/DocProps.php
A lib/PHPExcel/Writer/Excel2007/Drawing.php
A lib/PHPExcel/Writer/Excel2007/Rels.php
A lib/PHPExcel/Writer/Excel2007/RelsRibbon.php
A lib/PHPExcel/Writer/Excel2007/RelsVBA.php
A lib/PHPExcel/Writer/Excel2007/StringTable.php
A lib/PHPExcel/Writer/Excel2007/Style.php
A lib/PHPExcel/Writer/Excel2007/Theme.php
A lib/PHPExcel/Writer/Excel2007/Workbook.php
A lib/PHPExcel/Writer/Excel2007/Worksheet.php
A lib/PHPExcel/Writer/Excel2007/WriterPart.php
A lib/PHPExcel/Writer/Excel5.php
A lib/PHPExcel/Writer/Excel5/BIFFwriter.php
A lib/PHPExcel/Writer/Excel5/Escher.php
A lib/PHPExcel/Writer/Excel5/Font.php
A lib/PHPExcel/Writer/Excel5/Parser.php
A lib/PHPExcel/Writer/Excel5/Workbook.php
A lib/PHPExcel/Writer/Excel5/Worksheet.php
A lib/PHPExcel/Writer/Excel5/Xf.php
A lib/PHPExcel/Writer/Exception.php
A lib/PHPExcel/Writer/HTML.php
A lib/PHPExcel/Writer/IWriter.php
A lib/PHPExcel/Writer/OpenDocument.php
A lib/PHPExcel/Writer/OpenDocument/Cell/Comment.php
A lib/PHPExcel/Writer/OpenDocument/Content.php
A lib/PHPExcel/Writer/OpenDocument/Meta.php
A lib/PHPExcel/Writer/OpenDocument/MetaInf.php
A lib/PHPExcel/Writer/OpenDocument/Mimetype.php
A lib/PHPExcel/Writer/OpenDocument/Settings.php
A lib/PHPExcel/Writer/OpenDocument/Styles.php
A lib/PHPExcel/Writer/OpenDocument/Thumbnails.php
A lib/PHPExcel/Writer/OpenDocument/WriterPart.php
A lib/PHPExcel/Writer/PDF.php
A lib/PHPExcel/Writer/PDF/Core.php
A lib/PHPExcel/Writer/PDF/DomPDF.php
A lib/PHPExcel/Writer/PDF/mPDF.php
A lib/PHPExcel/Writer/PDF/tcPDF.php
A lib/PHPExcel/locale/bg/config
A lib/PHPExcel/locale/cs/config
A lib/PHPExcel/locale/cs/functions
A lib/PHPExcel/locale/da/config
A lib/PHPExcel/locale/da/functions
A lib/PHPExcel/locale/de/config
A lib/PHPExcel/locale/de/functions
A lib/PHPExcel/locale/en/uk/config
A lib/PHPExcel/locale/es/config
A lib/PHPExcel/locale/es/functions
A lib/PHPExcel/locale/fi/config
A lib/PHPExcel/locale/fi/functions
A lib/PHPExcel/locale/fr/config
A lib/PHPExcel/locale/fr/functions
A lib/PHPExcel/locale/hu/config
A lib/PHPExcel/locale/hu/functions
A lib/PHPExcel/locale/it/config
A lib/PHPExcel/locale/it/functions
A lib/PHPExcel/locale/nl/config
A lib/PHPExcel/locale/nl/functions
A lib/PHPExcel/locale/no/config
A lib/PHPExcel/locale/no/functions
A lib/PHPExcel/locale/pl/config
A lib/PHPExcel/locale/pl/functions
A lib/PHPExcel/locale/pt/br/config
A lib/PHPExcel/locale/pt/br/functions
A lib/PHPExcel/locale/pt/config
A lib/PHPExcel/locale/pt/functions
A lib/PHPExcel/locale/ru/config
A lib/PHPExcel/locale/ru/functions
A lib/PHPExcel/locale/sv/config
A lib/PHPExcel/locale/sv/functions
A lib/PHPExcel/locale/tr/config
A lib/PHPExcel/locale/tr/functions
14906d5 미완료 주문에서 변수 누락 ( 왕대인님 제보 )
M adm/shop_admin/inorderformupdate.php
9c49d06 쿠폰존 관리 오타 수정
M adm/shop_admin/couponzonelist.php
ba48171 네이버페이 장바구니 배송비 관련 수정
M shop/naverpay/naverpay_order.php
20f658f 오타 수정 (왕대인님 제보)
M adm/board_list.php
M adm/visit_date.php
M adm/visit_month.php
M adm/visit_search.php
119fe46 오타 수정 (왕대인님 제보)
M adm/shop_admin/optionstocklist.php
ed957cf LFI to RCE 취약점 수정
M adm/contentformupdate.php
M adm/qa_config_update.php
M bbs/content.php
M bbs/qahead.php
M bbs/qatail.php
M lib/common.lib.php
M lib/thumbnail.lib.php
cd7c056 주문 페이지 오타 수정
M adm/shop_admin/orderform.php
5edf093 주문내역 오류 수정
M adm/shop_admin/ajax.orderitem.php
83d13c5 부분옵션 검색 관련 부분 수정
M css/mobile_shop.css
M shop/itemoption.php