slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,985

Image ID Title
CVE-2026-71426 Path Traversal in GetSimple CMS (CVE-2026-71426)
CVE-2026-71542 Cross-Site Scripting (XSS) in GetSimple CMS (CVE-2026-71542)
CVE-2026-70650 Cross-Site Scripting (XSS) in GetSimple CMS (CVE-2026-70650)
CVE-2026-56660 Cross-Site Request Forgery (CSRF) in GetSimple CMS (CVE-2026-56660)
CVE-2026-53953 Vulnerability in GetSimple CMS (CVE-2026-53953)
CVE-2026-55231 Path Traversal in Vvveb (CVE-2026-55231)
CVE-2026-101888 Path Traversal in Prime Mover (WordPress plugin) (CVE-2026-101888)
CVE-2026-101890 Cross-Site Scripting (XSS) in Prime Mover (WordPress plugin) (CVE-2026-101890)
CVE-2026-103690 Vulnerability in itsourcecode Leave Management System (CVE-2026-103690)
CVE-2026-97284 Unsafe Deserialization in Icegram (CVE-2026-97284)
CVE-2026-94390 Unsafe Deserialization in Hide Shipping Method For WooCommerce (CVE-2026-94390)
CVE-2026-103687 Vulnerability in rhukster dom-sanitizer (CVE-2026-103687)
CVE-2026-103686 Cross-Site Scripting (XSS) in rhukster dom-sanitizer (CVE-2026-103686)
CVE-2026-64947 Cross-Site Request Forgery (CSRF) in Pandora FMS (CVE-2026-64947)
CVE-2026-96268 Cross-Site Scripting (XSS) in Awesome Support – WordPress HelpDesk & Support Plugin (WordPress plugin) (CVE-2026-96268)
CVE-2026-15983 Vulnerability in Super Forms – Drag & Drop Form Builder (WordPress plugin) (CVE-2026-15983)
CVE-2026-101925 Cross-Site Scripting (XSS) in bbp style pack (WordPress plugin) (CVE-2026-101925)
CVE-2026-88999 Vulnerability in Redux Framework (WordPress plugin) (CVE-2026-88999)
CVE-2026-86610 Cross-Site Scripting (XSS) in Download Manager (WordPress plugin) (CVE-2026-86610)
CVE-2026-103543 Vulnerability in itsourcecode Leave Management System (CVE-2026-103543)
CVE-2026-103542 SSRF (Server-Side Request Forgery) in formtools.org Form Tools (CVE-2026-103542)
CVE-2026-103541 Vulnerability in formtools.org Form Tools (CVE-2026-103541)
CVE-2026-103540 Vulnerability in formtools.org Form Tools (CVE-2026-103540)
CVE-2026-96561 Cross-Site Scripting (XSS) in WordPress (CVE-2026-96561)
CVE-2026-103533 Path Traversal in David-Crty databasement (CVE-2026-103533)
CVE-2026-103592 Vulnerability in simple-php-router (CVE-2026-103592)
CVE-2023-54403 Path Traversal in Yonyou U8 CRM (CVE-2023-54403)
CVE-2026-97291 Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions.
CVE-2026-97256 Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 versions.
CVE-2026-103474 Unrestricted File Upload in yii2-starter-kit (CVE-2026-103474)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details