slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,988

Image ID Title
CVE-2026-103115 Vulnerability in OS4ED openSIS-Classic (CVE-2026-103115)
CVE-2026-103114 Vulnerability in OS4ED openSIS-Classic (CVE-2026-103114)
CVE-2026-103113 Vulnerability in OS4ED openSIS-Classic (CVE-2026-103113)
CVE-2026-97150 When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config...
CVE-2026-89294 Vulnerability in Simply Schedule Appointments (WordPress plugin) (CVE-2026-89294)
CVE-2026-91051 Unsafe Deserialization in EWWW Image Optimizer (WordPress plugin) (CVE-2026-91051)
CVE-2026-75873 Unrestricted File Upload in Zella Theme (WordPress theme) (CVE-2026-75873)
CVE-2026-75823 Privilege Escalation in WordPress (CVE-2026-75823)
CVE-2026-102913 Vulnerability in SourceCodester Car Driving School Management System (CVE-2026-102913)
CVE-2026-102910 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-102910)
CVE-2026-102908 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-102908)
CVE-2026-102909 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-102909)
CVE-2026-102847 Cross-Site Scripting (XSS) in gedelumbung HospitalManagement (CVE-2026-102847)
CVE-2026-102846 Vulnerability in gedelumbung HospitalManagement (CVE-2026-102846)
CVE-2026-102845 Information Disclosure in gedelumbung HospitalManagement (CVE-2026-102845)
CVE-2026-102843 Path Traversal in gedelumbung HospitalManagement (CVE-2026-102843)
CVE-2026-102844 Vulnerability in gedelumbung HospitalManagement (CVE-2026-102844)
CVE-2026-102842 Vulnerability in gedelumbung HospitalManagement (CVE-2026-102842)
CVE-2026-70356 The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an...
CVE-2026-102771 Vulnerability in Naichen ThinkCMF (CVE-2026-102771)
CVE-2026-39117 Code Injection in AltumCode (CVE-2026-39117)
CVE-2026-65954 Vulnerability in phpcsstandards/phpcsutils (CVE-2026-65954)
CVE-2026-102424 Path Traversal in Balbooa (CVE-2026-102424)
CVE-2026-102425 Code Injection in Balbooa (CVE-2026-102425)
CVE-2026-102601 Vulnerability in league/flysystem (CVE-2026-102601)
CVE-2026-85520 Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated...
CVE-2026-102292 Cross-Site Scripting (XSS) in coolbeans1212 MateisHomePage-Website (CVE-2026-102292)
CVE-2026-102264 Cross-Site Scripting (XSS) in mwasikz robo-cafe-rms (CVE-2026-102264)
CVE-2026-102263 Vulnerability in mwasikz robo-cafe-rms (CVE-2026-102263)
CVE-2026-102247 Vulnerability in FastAdmin (CVE-2026-102247)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details