A PHP Error was encountered

Severity: Warning

Message: fopen(/var/lib/php/sessions/ci_session_ciboardd9pjvab13clun7tajs5pt0lfhp3fbdud): failed to open stream: No space left on device

Filename: drivers/Session_files_driver.php

Line Number: 177

Backtrace:

File: /home/ciboard/www/application/core/CB_Controller.php
Line: 68
Function: __construct

File: /home/ciboard/www/application/controllers/Board_post.php
Line: 30
Function: __construct

File: /home/ciboard/www/index.php
Line: 350
Function: require_once

A PHP Error was encountered

Severity: Warning

Message: session_start(): Failed to read session data: user (path: /var/lib/php/sessions)

Filename: Session/Session.php

Line Number: 143

Backtrace:

File: /home/ciboard/www/application/core/CB_Controller.php
Line: 68
Function: __construct

File: /home/ciboard/www/application/controllers/Board_post.php
Line: 30
Function: __construct

File: /home/ciboard/www/index.php
Line: 350
Function: require_once

씨아이보드 Lite 3.0.3 > Lite 다운로드 - 씨아이보드 :: 코드이그나이터 게시판 오픈소스
코드이그나이터 기반 PHP 오픈소스 게시판 : 씨아이보드

씨아이보드 Lite 3.0.3

  • 관리자
  • 1
  • 3,125
  • 글주소
  • 10-21

[수정 내역]


XSS 취약점 (KVE-2019-1139) (KISA 에서 알려주셨습니다.)

각 model 에 선언되어있는 get_admin_list 함수를 core 의 CB_MODEL 로 통합

각 model 에 선언되어있는 get_list 함수를 core 의 CB_MODEL 로 통합

uniqid 를얻는 로직 변경



[수정된 파일] 


application/config/cb_version.php

application/controllers/Board_write.php

application/core/CB_Model.php

application/helpers/basic_helper.php

application/models/Banner_group_model.php

application/models/Banner_model.php

application/models/Board_category_model.php

application/models/Board_group_model.php

application/models/Board_model.php

application/models/Faq_model.php

application/models/Follow_model.php

application/models/Member_dormant_model.php

application/models/Member_dormant_notify_model.php

application/models/Member_group_model.php

application/models/Member_login_log_model.php

application/models/Menu_model.php

application/models/Point_model.php

application/models/Popup_model.php

application/models/Post_model.php

application/models/Stat_count_model.php

application/models/Unique_id_model.php

views/_layout/basic/css/style.css

views/_layout/basic/layout.php

views/_layout/basic/layout_popup.php

views/_layout/bootstrap/css/style.css

views/_layout/bootstrap/layout.php

views/_layout/bootstrap/layout_popup.php

views/_layout/mobile/css/style.css

views/_layout/mobile/layout.php

views/_layout/mobile/layout_popup.php

views/admin/basic/board/boardgroup/write.php

views/admin/basic/board/boardgroup/write_admin.php

views/admin/basic/board/boards/write.php

views/admin/basic/board/boards/write_access.php

views/admin/basic/board/boards/write_admin.php

views/admin/basic/board/boards/write_alarm.php

views/admin/basic/board/boards/write_category.php

views/admin/basic/board/boards/write_comment.php

views/admin/basic/board/boards/write_extravars.php

views/admin/basic/board/boards/write_general.php

views/admin/basic/board/boards/write_list.php

views/admin/basic/board/boards/write_point.php

views/admin/basic/board/boards/write_post.php

views/admin/basic/board/boards/write_rss.php

views/admin/basic/board/boards/write_write.php

views/admin/basic/config/cbconfigs/access.php

views/admin/basic/config/cbconfigs/company.php

views/admin/basic/config/cbconfigs/general.php

views/admin/basic/config/cbconfigs/index.php

views/admin/basic/config/cbconfigs/note.php

views/admin/basic/config/cbconfigs/notification.php

views/admin/basic/config/cbconfigs/point.php

views/admin/basic/config/emailform/blame.php

views/admin/basic/config/emailform/comment.php

views/admin/basic/config/emailform/comment_blame.php

views/admin/basic/config/emailform/post.php

views/admin/basic/config/layoutskin/favicon.php

views/admin/basic/config/layoutskin/index.php

views/admin/basic/config/layoutskin/metatag.php

views/admin/basic/config/memberconfig/alarm.php

views/admin/basic/config/memberconfig/index.php

views/admin/basic/config/memberconfig/login.php

views/admin/basic/config/memberconfig/membermodify.php

views/admin/basic/config/memberconfig/registerform.php

views/admin/basic/config/memberconfig/sociallogin.php

views/admin/basic/config/rssconfig/index.php

views/admin/basic/config/rssconfig/naverblog.php

views/admin/basic/config/rssconfig/sitemap.php

views/admin/basic/config/scheduler/index.php

views/admin/basic/config/scheduler/interval.php

views/admin/basic/css/style.css

views/admin/basic/layout.php

views/admin/basic/layout_popup.php

views/admin/basic/member/dormant/index.php

views/admin/basic/member/members/write.php

views/admin/basic/member/points/write.php

views/admin/basic/page/banner/group.php

views/admin/basic/page/banner/write.php

views/admin/basic/page/document/write.php

views/admin/basic/page/faq/write.php

views/admin/basic/page/faqgroup/write.php

views/admin/basic/page/popup/write.php

views/install/css/common.css

views/install/header.php

views/install/header_upgrade.php