slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,985

Image ID Title
CVE-2026-107376 webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser…
CVE-2026-105436 Unsafe Deserialization in MainWP Child (CVE-2026-105436)
CVE-2026-107639 Vulnerability in ILIAS (CVE-2026-107639)
CVE-2026-107638 Vulnerability in pH7Builder (CVE-2026-107638)
CVE-2026-105830 Vulnerability in league/commonmark (CVE-2026-105830)
CVE-2026-12260 SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ...
CVE-2026-85097 Unrestricted File Upload in Bricksforge (WordPress plugin) (CVE-2026-85097)
CVE-2026-103692 Privilege Escalation in Frontend Dashboard (WordPress plugin) (CVE-2026-103692)
CVE-2026-82627 Unsafe Deserialization in WordPress (CVE-2026-82627)
CVE-2026-89417 Cross-Site Scripting (XSS) in WordPress Apache (CVE-2026-89417)
CVE-2026-102782 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7...
CVE-2026-97188 Unsafe Deserialization in String locator (WordPress plugin) (CVE-2026-97188)
CVE-2026-104677 Code Injection in WP Coder (WordPress plugin) (CVE-2026-104677)
CVE-2026-106512 The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content...
CVE-2026-105957 Vulnerability in SourceCodester Performance Indicator System (CVE-2026-105957)
CVE-2026-104070 Vulnerability in Crayons plugin for SPIP (CVE-2026-104070)
CVE-2026-105950 Cross-Site Scripting (XSS) in getformwork formwork (CVE-2026-105950)
CVE-2026-105921 Vulnerability in Kusalkasilva Learning-Management-System (CVE-2026-105921)
CVE-2026-105796 Code Injection in Microsoft.OpenApi.Kiota (CVE-2026-105796)
CVE-2026-104069 Unrestricted File Upload in HortusFox (CVE-2026-104069)
CVE-2026-105920 Vulnerability in Kusalkasilva Learning-Management-System (CVE-2026-105920)
CVE-2026-82531 Code Injection in Smarty (CVE-2026-82531)
CVE-2026-105919 Vulnerability in Kusalkasilva Learning-Management-System (CVE-2026-105919)
CVE-2026-105918 Vulnerability in Kusalkasilva Learning-Management-System (CVE-2026-105918)
CVE-2026-105985 Vulnerability in Craft CMS (CVE-2026-105985)
CVE-2026-103831 Unsafe Deserialization in TrueLayer Magento 2 Plugin (CVE-2026-103831)
CVE-2026-4889 SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST...
CVE-2026-39797 Unsafe Deserialization in GDPR Framework By Data443 (CVE-2026-39797)
CVE-2026-105809 Cross-Site Scripting (XSS) in SourceCodester Simple Student Information System (CVE-2026-105809)
CVE-2026-105808 Cross-Site Scripting (XSS) in SourceCodester Simple Student Information System (CVE-2026-105808)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details