slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2026-100697 SSRF (Server-Side Request Forgery) in Adminer (CVE-2026-100697)
CVE-2026-100695 Cross-Site Scripting (XSS) in Adminer (CVE-2026-100695)
CVE-2026-100698 SSRF (Server-Side Request Forgery) in Adminer (CVE-2026-100698)
CVE-2026-100696 SSRF (Server-Side Request Forgery) in Adminer (CVE-2026-100696)
CVE-2026-100673 Cross-Site Scripting (XSS) in Grav Data Manager plugin (CVE-2026-100673)
CVE-2026-100669 Vulnerability in Apache (CVE-2026-100669)
CVE-2026-100315 Vulnerability in mathurvishal CloudClassroom-PHP-Project (CVE-2026-100315)
CVE-2026-100314 Vulnerability in mathurvishal CloudClassroom-PHP-Project (CVE-2026-100314)
CVE-2026-100313 Cross-Site Scripting (XSS) in mathurvishal CloudClassroom-PHP-Project (CVE-2026-100313)
CVE-2026-100312 Vulnerability in mathurvishal CloudClassroom-PHP-Project (CVE-2026-100312)
CVE-2026-100311 Cross-Site Scripting (XSS) in mathurvishal CloudClassroom-PHP-Project (CVE-2026-100311)
CVE-2026-18143 Unrestricted File Upload in Request a Quote for WooCommerce (WordPress plugin) (CVE-2026-18143)
CVE-2026-100520 Path Traversal in Laranode (CVE-2026-100520)
CVE-2026-100523 Open Redirect in Cotonti (CVE-2026-100523)
CVE-2026-100522 Cross-Site Scripting (XSS) in Cotonti (CVE-2026-100522)
CVE-2026-91767 php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a…
CVE-2026-91769 Vulnerability in PHP (CVE-2026-91769)
CVE-2026-17545 On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to…
CVE-2026-100389 Unrestricted File Upload in GestSup (CVE-2026-100389)
CVE-2026-100372 Path Traversal in ClipBucket (CVE-2026-100372)
CVE-2026-97897 Cross-Site Scripting (XSS) in Krayin laravel-crm (CVE-2026-97897)
CVE-2026-97895 Vulnerability in krayin laravel-crm (CVE-2026-97895)
CVE-2026-97896 Cross-Site Scripting (XSS) in krayin laravel-crm (CVE-2026-97896)
CVE-2026-97885 Vulnerability in mathurvishal CloudClassroom-PHP-Project (CVE-2026-97885)
CVE-2026-97883 Vulnerability in mathurvishal CloudClassroom-PHP-Project (CVE-2026-97883)
CVE-2026-97884 Vulnerability in mathurvishal CloudClassroom-PHP-Project (CVE-2026-97884)
CVE-2026-97886 Vulnerability in mathurvishal CloudClassroom-PHP-Project (CVE-2026-97886)
CVE-2026-97882 Vulnerability in mathurvishal CloudClassroom-PHP-Project (CVE-2026-97882)
CVE-2026-93365 Vulnerability in Bludit CMS (CVE-2026-93365)
CVE-2026-93364 Vulnerability in Bludit CMS (CVE-2026-93364)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details