[보안패치] 이윰빌더 4.6.6 with 그누보드 5.5.8.3.3 ~ 5.5.11 > 이윰빌더 시즌4

이윰빌더 시즌4 - EB_4.6.6 버전입니다.

 

이번 버전에는 다수의 [보안패치]가 있었습니다.

한국인터넷진흥원에서 제공하는 보안이슈들이 있었는데요.

SQL Injection 및 XSS 공격 허점들이 다수 발견되었습니다.

 

-- 작업 내역 --

01. 이윰빌더 버전을 4.6.6 으로 변경

M : eyoom/extend/eyoom4.version.php

 

02. 게시물 통합관리 php 버전 호환성 버그 패치

M : adm/eyoom_admin/core/board/bbs_list.php

 

03. [보안패치] KVE-2023-5210 - gr_id 인자값에 blind SQL injection 취약점 패치

M : eyoom/class/bbs.class.php

M : eyoom/core/board/group.php

 

04. 게시판 관리 통합에 따른 확장기능 설정 저장이 안되던 버그 패치

M : adm/eyoom_admin/core/board/board_addon_update.php

 

05. gallery, webzine 게시판 무한 스크롤 설정 시 버그 수정 작업 (wmode에서 수정, 삭제 시 각종 버그들 - 모달창이 닫히면서 수정, 또는 삭제 링크로 이동하도록 개선)

M : theme/eb4_basic/skin/board/gallery/list.skin.html.php

M : theme/eb4_basic/skin/board/gallery/view.skin.html.php

M : theme/eb4_basic/skin/board/webzine/list.skin.html.php

M : theme/eb4_basic/skin/board/webzine/view.skin.html.php

 

06. 쇼핑몰 주문자 전화번호 출력 버그 패치

M : adm/eyoom_admin/theme/eba_basic/skin/shopetc/orderprintresult.html.php

 

07. 쇼핑몰 상품관리 폼페이지 오타수정

M : adm/eyoom_admin/core/shop/itemformupdate.php

M : adm/eyoom_admin/theme/eba_basic/skin/shop/itemform.html.php

 

08. 회원포인트 관리에서 포인트 내역별로 검색할 수 있도록 기능 추가

M : adm/eyoom_admin/core/member/point_list.php

M : adm/eyoom_admin/theme/eba_basic/skin/member/point_list.html.php

 

09. 윈도우모드에서 회원관리 엑셀 다운로드 버튼 보이지 않도록 숨김처리

M : adm/eyoom_admin/theme/eba_basic/skin/member/member_list.html.php

 

10. 방문통계 숨김처리 시 관리자모드의 방문통계 자료를 불러오지 못하는 버그 패치

M : eyoom/lib/visit.lib.php

 

11. 마이페이지에서 맞팔친구/팔로우/팔로잉 출력 버그 패치

M : eyoom/core/mypage/mypage.php

 

12. 유튜브 라이브영상 및 쇼츠영상 출력되도록 기능 개선

M : eyoom/class/bbs.class.php

 

13. [보안패치] KVE-2023-5210 - gr_id 변수를 통한 SQL Injection 취약점 패치

M : common.php

M : eyoom/core/board/group.php

 

14. [보안패치] KVE-2023-5466 - eyoom_subpage_info 함수를 통한 SQl 인젝션 취약점 패치

M : common.php

M : bbs/new.php

M : eyoom/class/theme.class.php

M : eyoom/core/board/group.php

M : page/index.php

 

15. [보안패치] KVE-2023-5677 - 원격 명령 실행 취약점 패치

M : eyoom/class/theme.class.php

 

16. [보안패치] KVE-2023-6146 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/shop/itemtypelist.php

M : adm/eyoom_admin/core/shop/itemuselist.php

M : adm/eyoom_admin/core/shop/optionstocklist.php

M : adm/eyoom_admin/core/shopetc/itemeventlist.php

M : adm/eyoom_admin/core/shopetc/itemstocksms.php

M : adm/eyoom_admin/core/shopetc/wishlist.php

M : adm/eyoom_admin/core/theme/tag_list_update.php

 

17. [보안패치] KVE-2023-6147 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/theme/ebbanner_list_update.php

M : adm/eyoom_admin/core/theme/ebcontents_list_update.php

M : adm/eyoom_admin/core/theme/ebgoods_list_update.php

M : adm/eyoom_admin/core/theme/eblatest_list_update.php

M : adm/eyoom_admin/core/theme/ebslider_list_update.php

M : adm/eyoom_admin/core/theme/tag_list_update.php

 

18. [보안패치] KVE-2023-6148 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/board/board_copy_update.php

M : adm/eyoom_admin/core/board/board_list.php

M : adm/eyoom_admin/core/somoim/create_somoim.php

M : adm/eyoom_admin/core/somoim/make_somoim_board.php

 

19. [보안패치] KVE-2023-6149 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/board/bbs_group_board_ajax.php

M : adm/eyoom_admin/core/board/bbs_list.php

M : adm/eyoom_admin/core/board/bbs_list_update.php

M : adm/eyoom_admin/core/somoim/create_somoim.php

M : adm/eyoom_admin/core/somoim/make_somoim_board.php

M : adm/eyoom_admin/core/somoim/somo_form_update.php

 

20. [보안패치] KVE-2023-6150 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/shop/itemlist.php

M : adm/eyoom_admin/core/shop/itemlistupdate.php

M : adm/eyoom_admin/core/shop/itemqalistupdate.php

M : adm/eyoom_admin/core/somoim/config_form.php

M : adm/eyoom_admin/core/somoim/config_form_update.php

M : adm/eyoom_admin/core/somoim/create_somoim.php

M : adm/eyoom_admin/core/somoim/make_somoim_board.php

M : adm/eyoom_admin/core/somoim/somo_apply.php

M : adm/eyoom_admin/core/somoim/somo_form.php

M : adm/eyoom_admin/core/somoim/somo_form_update.php

M : adm/eyoom_admin/core/somoim/somo_list.php

M : adm/eyoom_admin/core/somoim/somo_list_update.php

M : adm/eyoom_admin/theme/eba_basic/skin/shop/itemlist.html.php

M : adm/eyoom_admin/theme/eba_basic/skin/shop/itemuselist.html.php

M : adm/eyoom_admin/theme/eba_basic/skin/shop/optionstocklist.html.php

M : adm/eyoom_admin/theme/eba_basic/skin/shopetc/itemeventlist.html.php

 

21. [보안패치] KVE-2023-6151 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/shop/itemqalist.php

M : adm/eyoom_admin/theme/eba_basic/skin/shop/itemqalist.html.php

 

22. [보안패치] KVE-2023-6152 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/shop/itemform.php

M : adm/eyoom_admin/core/theme/skin_manager_update.php

 

23. [보안패치] KVE-2023-6153 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/shop/itemstocklist.php

M : adm/eyoom_admin/core/theme/layout_update.php

M : adm/eyoom_admin/theme/eba_basic/skin/shop/itemstocklist.html.php

M : eyoom/class/qfile.class.php

 

24. [보안패치] KVE-2023-6154 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/shop/categoryformupdate.php

M : adm/eyoom_admin/core/shopetc/itemsellrank.php

M : adm/eyoom_admin/core/theme/ebslider_ytitemlist_update.php

 

25. [보안패치] KVE-2023-6155 - XSS to RCE 취약점 패치

M : adm/eyoom_admin/core/board/tag_list.php

M : adm/eyoom_admin/core/shop/categoryformupdate.php

M : adm/eyoom_admin/core/theme/biz_info_update.php

M : adm/eyoom_admin/core/theme/board_form_update.php

M : adm/eyoom_admin/core/theme/board_list_update.php

M : adm/eyoom_admin/core/theme/config_form_update.php

M : adm/eyoom_admin/core/theme/ebbanner_form_update.php

M : adm/eyoom_admin/core/theme/ebbanner_itemlist_update.php

M : adm/eyoom_admin/core/theme/tag_list.php

M : adm/eyoom_admin/core/theme/theme_head.php

 

26. 그누보드 5.5.8.3.3 버전으로 업그레이드 패치 적용

M : common.php

M : adm/eyoom_admin/admin.tail.php

M : adm/eyoom_admin/core/shop/itemcopyupdate.php

M : adm/eyoom_admin/theme/eba_basic/admin.tail.html.php

M : eyoom/core/board/move_update.php

M : mobile/shop/orderformupdate.php

M : theme/eb4_basic/skin/member/basic/login.skin.html.php

 

27. 그누보드 5.5.8.3.4 버전으로 업그레이드 패치 적용

M : eyoom/core/board/move_update.php

 

28. 그누보드 5.5.9 버전으로 업그레이드 패치 적용

M : common.php

M : adm/eyoom_admin/core/board/board_copy_update.php

M : bbs/list.php

 

29. 그누보드 5.5.10 버전으로 업그레이드 패치 적용

M : common.php

 

30. 그누보드 5.5.11 버전으로 업그레이드 패치 적용

M : adm/eyoom_admin/core/board/contentform.php

M : adm/eyoom_admin/core/config/config_form.php

M : adm/eyoom_admin/core/shop/itemcopyupdate.php

M : adm/eyoom_admin/core/shop/itemform.php

M : adm/eyoom_admin/theme/eba_basic/skin/config/config_form.html.php

M : eyoom/core/shop/item.php

 

31. 게시물 상단 고정 버그 패치

M : eyoom/class/bbs.class.php

 

32. 블라인드 처리된 게시물 wmode 에서 링크주소 미전달 버그 패치

M : eyoom/core/board/list.skin.php

 

33. 무한스크롤 윈도우 모드에서 별점평가 후, wmode 변수 전달하기

M : theme/eb4_basic/skin/board/basic/view.skin.html.php

M : theme/eb4_basic/skin/board/gallery/view.skin.html.php

M : theme/eb4_basic/skin/board/webzine/view.skin.html.php

 

34. 게시판 생성시 이윰 게시판 스킨 미출력 버그 패치

M : adm/eyoom_admin/core/board/board_form.php

M : adm/eyoom_admin/theme/eba_basic/skin/board/board_form.html.php

 

35. 관리자 모드 환경설정, 쇼핑몰환경설정, 게시판설정 적용관련 버그 패치

M : adm/eyoom_admin/core/shop/configformupdate.php

M : adm/eyoom_admin/theme/eba_basic/skin/board/board_form.html.php

M : adm/eyoom_admin/theme/eba_basic/skin/config/config_form.html.php

------------

감사합니다.