slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2026-12272 Vulnerability in WordPress (CVE-2026-12272)
CVE-2026-103896 Path Traversal in WordPress (CVE-2026-103896)
CVE-2026-104932 Unsafe Deserialization in Search Regex (WordPress plugin) (CVE-2026-104932)
CVE-2026-100158 Cross-Site Scripting (XSS) in SQL Chart Builder (WordPress plugin) (CVE-2026-100158)
CVE-2026-109221 Path Traversal in Groundhogg — CRM, Newsletters, and Marketing Automation (WordPress plugin) (CVE-2026-109221)
CVE-2026-111114 Privilege Escalation in WordPress (CVE-2026-111114)
CVE-2026-109998 Cross-Site Scripting (XSS) in Mang Board (WordPress plugin) (CVE-2026-109998)
CVE-2026-104798 Privilege Escalation in My Calendar – Accessible Event Manager (WordPress plugin) (CVE-2026-104798)
CVE-2026-111348 Vulnerability in Likeshop (CVE-2026-111348)
CVE-2026-111284 Cross-Site Scripting (XSS) in Aureus ERP (CVE-2026-111284)
CVE-2026-111228 Vulnerability in Netgate pfSense CE (CVE-2026-111228)
CVE-2026-111233 Cross-Site Scripting (XSS) in Netgate pfSense CE (CVE-2026-111233)
CVE-2026-111230 Vulnerability in Netgate pfSense CE (CVE-2026-111230)
CVE-2026-111231 Authorization Flaw in Netgate pfSense CE (CVE-2026-111231)
CVE-2026-111229 pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in...
CVE-2026-111220 pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php...
CVE-2026-111221 Vulnerability in Netgate pfSense CE (CVE-2026-111221)
CVE-2026-111219 Vulnerability in Netgate pfSense CE (CVE-2026-111219)
CVE-2026-111227 Vulnerability in Netgate pfSense CE (CVE-2026-111227)
CVE-2026-111222 Vulnerability in Netgate pfSense CE (CVE-2026-111222)
CVE-2026-111215 OS Command Injection in Netgate pfSense CE (CVE-2026-111215)
CVE-2026-110874 Unsafe Deserialization in Dolibarr (CVE-2026-110874)
CVE-2026-110878 Cross-Site Scripting (XSS) in Aureus ERP (CVE-2026-110878)
CVE-2026-104198 Authentication Bypass in ZoneMinder (CVE-2026-104198)
CVE-2026-62858 Vulnerability in yourls/yourls (CVE-2026-62858)
CVE-2026-104827 Vulnerability in react/http (CVE-2026-104827)
CVE-2026-55872 Cross-Site Scripting (XSS) in GYM One (CVE-2026-55872)
CVE-2026-55871 SQL Injection in GYM One (CVE-2026-55871)
CVE-2026-78851 Path Traversal in Grav CMS (CVE-2026-78851)
CVE-2026-77468 Vulnerability in Lychee (CVE-2026-77468)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details