slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,985

Image ID Title
CVE-2026-105166 Vulnerability in kishor-23 food-waste-management-system (CVE-2026-105166)
CVE-2026-105167 Vulnerability in kishor-23 food-waste-management-system (CVE-2026-105167)
CVE-2026-105217 Vulnerability in Cockpit CMS (CVE-2026-105217)
CVE-2026-105224 Cross-Site Scripting (XSS) in YesWiki (CVE-2026-105224)
CVE-2026-105156 Vulnerability in YzmCMS (CVE-2026-105156)
CVE-2026-105146 Vulnerability in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910 (CVE-2026-105146)
CVE-2026-105124 W (vincent-peugnet/wcms) through 3.18.0 contains a stored cross-site scripting vulnerability that...
CVE-2026-105123 W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that...
CVE-2026-97660 Cross-Site Scripting (XSS) in WPC Product Options for WooCommerce (WordPress plugin) (CVE-2026-97660)
CVE-2026-87115 Path Traversal in VikAppointments Services Booking Calendar (WordPress plugin) (CVE-2026-87115)
CVE-2026-75028 Vulnerability in WordPress (CVE-2026-75028)
CVE-2026-18443 SQL Injection in WordPress (CVE-2026-18443)
CVE-2026-91108 Vulnerability in WordPress (CVE-2026-91108)
CVE-2026-85015 Path Traversal in Unlimited Elements for Elementor (WordPress plugin) (CVE-2026-85015)
CVE-2026-101928 Cross-Site Scripting (XSS) in Magic Tooltips For Contact Form (WordPress plugin) (CVE-2026-101928)
CVE-2026-97644 Privilege Escalation in Groundhogg — CRM, Newsletters, and Marketing Automation (WordPress plugin) (CVE-2026-97644)
CVE-2026-92536 Code Injection in WordPress (CVE-2026-92536)
CVE-2026-105029 Vulnerability in UVdesk support-center-bundle (CVE-2026-105029)
CVE-2026-104479 Cross-Site Scripting (XSS) in Shopclass (CVE-2026-104479)
CVE-2026-104478 Path Traversal in Formwork (CVE-2026-104478)
CVE-2026-39718 Cross-Site Request Forgery (CSRF) in Wallstreet (CVE-2026-39718)
CVE-2014-125130 Path Traversal in WordPress (CVE-2014-125130)
CVE-2026-104638 Authentication Bypass in onetwothreeneth HospitalManagementSystem (CVE-2026-104638)
CVE-2026-104625 Vulnerability in CodeAstro Simple Loan Management System (CVE-2026-104625)
CVE-2026-104637 Vulnerability in onetwothreeneth HospitalManagementSystem (CVE-2026-104637)
CVE-2026-104614 Vulnerability in CodeAstro Simple Pharmacy Management System (CVE-2026-104614)
CVE-2026-104613 Vulnerability in CodeAstro Simple Pharmacy Management System (CVE-2026-104613)
CVE-2026-96289 Vulnerability in Apache (CVE-2026-96289)
CVE-2026-66837 Vulnerability in Apache (CVE-2026-66837)
CVE-2026-66858 Vulnerability in Apache (CVE-2026-66858)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details