slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,988

Image ID Title
CVE-2026-96604 Vulnerability in SoftNews Media Group DataLife Engine (CVE-2026-96604)
CVE-2026-86583 Vulnerability in WordPress (CVE-2026-86583)
CVE-2026-96601 Vulnerability in Abdurrab5 online-makeup-store (CVE-2026-96601)
CVE-2026-93352 Unrestricted File Upload in Laravel Apache (CVE-2026-93352)
CVE-2026-96602 Vulnerability in Abdurrab5 online-makeup-store (CVE-2026-96602)
CVE-2026-19125 Authentication Bypass in EthPress – Web3 Login (WordPress plugin) (CVE-2026-19125)
CVE-2026-96556 Vulnerability in Neethuharii CafeManagement (CVE-2026-96556)
CVE-2026-95603 Unsafe Deserialization in Reycob Product Import Export (CVE-2026-95603)
CVE-2026-92692 SQL Injection in sulu/sulu (CVE-2026-92692)
CVE-2026-90901 Vulnerability in Media Image (CVE-2026-90901)
CVE-2026-90900 Cross-Site Request Forgery (CSRF) in Storefront Product Review (CVE-2026-90900)
CVE-2026-90905 Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update...
CVE-2026-90902 Vulnerability in Coupon Bulk Update (CVE-2026-90902)
CVE-2026-90904 Vulnerability in ApiController Record (CVE-2026-90904)
CVE-2026-96513 Vulnerability in Neethuharii CafeManagement (CVE-2026-96513)
CVE-2026-96514 Vulnerability in Neethuharii CafeManagement (CVE-2026-96514)
CVE-2026-88974 Authorization Flaw in wp-graphql/wp-graphql (CVE-2026-88974)
CVE-2026-73858 Vulnerability in solspace/craft-freeform (CVE-2026-73858)
CVE-2026-63001 Cross-Site Scripting (XSS) in redaxo/source (CVE-2026-63001)
CVE-2026-63002 Cross-Site Scripting (XSS) in redaxo/source (CVE-2026-63002)
CVE-2026-62998 Vulnerability in redaxo/source (CVE-2026-62998)
CVE-2026-63000 Cross-Site Request Forgery (CSRF) in redaxo/source (CVE-2026-63000)
CVE-2026-93368 SQL Injection in Rename wp-login.php to anything you want (WordPress plugin) (CVE-2026-93368)
CVE-2026-75799 Code Injection in YAHMAN Add-ons (WordPress plugin) (CVE-2026-75799)
CVE-2026-95957 A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0....
CVE-2026-95927 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-95927)
CVE-2026-95926 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-95926)
CVE-2026-95925 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-95925)
CVE-2026-95924 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-95924)
CVE-2026-95830 Vulnerability in theRealSain Pixtream (CVE-2026-95830)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details