slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,246

Image ID Title
CVE-2026-34394 Cross-Site Request Forgery (CSRF) in WWBN AVideo (CVE-2026-34394)
CVE-2026-34395 Vulnerability in WWBN AVideo (CVE-2026-34395)
CVE-2026-34396 Cross-Site Scripting (XSS) in WWBN AVideo (CVE-2026-34396)
CVE-2026-34372 Vulnerability in Sulu (CVE-2026-34372)
CVE-2026-30520 SQL Injection in SourceCodester Loan Management System (CVE-2026-30520)
CVE-2026-5203 Path Traversal in CMS Made Simple (CVE-2026-5203)
CVE-2026-5198 Vulnerability in code-projects Student Membership System (CVE-2026-5198)
CVE-2026-34036 Vulnerability in Dolibarr (CVE-2026-34036)
CVE-2026-30567 Cross-Site Scripting (XSS) in Ahsanriaz26Gmailcom (CVE-2026-30567)
CVE-2026-5010 A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu. This vulnerability allows an…
CVE-2026-30463 SQL Injection in Fuel Cms (CVE-2026-30463)
CVE-2026-30457 Code Injection in Fuel Cms (CVE-2026-30457)
CVE-2026-4809 Unrestricted File Upload in Laravel (CVE-2026-4809)
CVE-2026-23923 Vulnerability in Zabbix (CVE-2026-23923)
CVE-2026-23921 SQL Injection in Zabbix (CVE-2026-23921)
CVE-2025-41008 SQL Injection in Sinturno (CVE-2025-41008)
CVE-2025-41007 SQL Injection in Cuantis. This vulnerability allows an attacker to retrieve, create, update and delete databases…
CVE-2019-25580 Unrestricted File Upload in ownDMS (CVE-2019-25580)
CVE-2019-25578 SQL Injection in phpTransformer (CVE-2019-25578)
CVE-2026-32935 Vulnerability in phpseclib/phpseclib (CVE-2026-32935)
CVE-2026-32843 Cross-Site Scripting (XSS) in Location Aware Sensor System by Linkit ONE (CVE-2026-32843)
CVE-2025-50881 The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code…
CVE-2026-29516 Vulnerability in Buffalo TeraStation NAS TS5400R firmware (CVE-2026-29516)
CVE-2019-25471 Path Traversal in FileThingie (CVE-2019-25471)
CVE-2026-3843 SQL Injection in Linux Nefteprodukttekhnika BUK TS-G Gas Station Automation System (CVE-2026-3843)
CVE-2025-40639 SQL Injection in Sbitsoft (CVE-2025-40639)
CVE-2018-25196 SQL Injection in ServerZilla (CVE-2018-25196)
CVE-2018-25197 SQL Injection in PlayJoom (CVE-2018-25197)
CVE-2018-25163 SQL Injection in BitZoom (CVE-2018-25163)
CVE-2026-28517 OS Command Injection in openDCIM (CVE-2026-28517)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details