-------------------------------------------------------------------
■脆弱性が存在するEC-CUBEのバージョン
-------------------------------------------------------------------
EC-CUBEの全てのバージョン(コミュニティ版も含む)
1系,2系全て該当します。
-------------------------------------------------------------------
■修正方法について
-------------------------------------------------------------------
---------------
ver1
---------------
html/products/detail_image.php
----------------------------------------------------------------------------------
変更前
----------------------------------------------------------------------------------
$objQuery = new SC_Query();
$col = "name, $image_key";
----------------------------------------------------------------------------------
変更後
----------------------------------------------------------------------------------
$objQuery = new SC_Query();
$col = "name, $image_key";
if(!sfColumnExists("dtb_products",$_GET['image'])){
sfDispSiteError(PRODUCT_NOT_FOUND);
}
----------------------------------------------------------------------------------
---------------
ver2
---------------
data/class/pages/products/LC_Page_Products_DetailImage.php
----------------------------------------------------------------------------------
変更前
----------------------------------------------------------------------------------
$objQuery = new SC_Query();
$col = "name, $image_key";
----------------------------------------------------------------------------------
変更後
----------------------------------------------------------------------------------
$objQuery = new SC_Query();
// カラムが存在していなければエラー画面を表示
if(!$objDb->sfColumnExists("dtb_products",$image_key)){
SC_Utils_Ex::sfDispSiteError(PRODUCT_NOT_FOUND);
}
$col = "name, $image_key";
----------------------------------------------------------------------------------
-------------------------------------------------------------------
|
