slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,263

Image ID Title
CVE-2026-44886 SQL Injection in Pi.Alert (CVE-2026-44886)
CVE-2026-42877 Cross-Site Scripting (XSS) in facturascripts/facturascripts (CVE-2026-42877)
CVE-2026-45066 Vulnerability in symfony/html-sanitizer (CVE-2026-45066)
CVE-2026-45064 Vulnerability in symfony/html-sanitizer (CVE-2026-45064)
CVE-2026-42878 Information Disclosure in facturascripts/facturascripts (CVE-2026-42878)
CVE-2026-44460 Information Disclosure in FileRise (CVE-2026-44460)
CVE-2026-45260 Vulnerability in pimcore/pimcore (CVE-2026-45260)
CVE-2026-45027 Vulnerability in WeGIA (CVE-2026-45027)
CVE-2026-45335 Open Redirect in WeGIA (CVE-2026-45335)
CVE-2026-38931 A stored cross-site scripting (XSS) vulnerability in the /admin/config-module.php component of...
CVE-2026-38930 SQL Injection in OpenRapid RapidCMS (CVE-2026-38930)
CVE-2026-45162 Unsafe Deserialization in pimcore/pimcore (CVE-2026-45162)
CVE-2026-45065 Vulnerability in symfony/routing (CVE-2026-45065)
CVE-2026-45063 Vulnerability in symfony/security-http (CVE-2026-45063)
CVE-2026-37713 Code Injection in Dolibarr ERP/CRM (CVE-2026-37713)
CVE-2026-37711 Code Injection in Dolibarr ERP/CRM (CVE-2026-37711)
CVE-2026-37712 Code Injection in Dolibarr ERP/CRM (CVE-2026-37712)
CVE-2026-30498 A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of...
CVE-2026-48972 Vulnerability in SeedProd Pro (CVE-2026-48972)
CVE-2026-46052 Vulnerability in Linux kernel (CVE-2026-46052)
CVE-2026-42762 Cross-Site Scripting (XSS) in VikBooking Hotel Booking Engine & PMS (CVE-2026-42762)
CVE-2026-42746 Vulnerability in Smart Online Order for Clover (CVE-2026-42746)
CVE-2026-42735 Vulnerability in KiviCare (CVE-2026-42735)
CVE-2026-42737 Path Traversal in VikBooking Hotel Booking Engine & PMS (CVE-2026-42737)
CVE-2026-42745 Vulnerability in Smart Online Order for Clover (CVE-2026-42745)
CVE-2026-42730 SQL Injection in MasterStudy LMS (CVE-2026-42730)
CVE-2026-40829 A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in...
CVE-2026-40830 A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in...
CVE-2026-40834 An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in...
CVE-2026-40833 An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details