slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,992

Image ID Title
CVE-2026-93977 Cross-Site Scripting (XSS) in code-projects Assessment Management (CVE-2026-93977)
CVE-2026-93976 Cross-Site Scripting (XSS) in code-projects Assessment Management (CVE-2026-93976)
CVE-2026-93975 Cross-Site Scripting (XSS) in code-projects Assessment Management (CVE-2026-93975)
CVE-2026-93973 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-93973)
CVE-2026-93974 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-93974)
CVE-2026-93972 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-93972)
CVE-2026-85017 Unsafe Deserialization in Unlimited Elements For Elementor (WordPress plugin) (CVE-2026-85017)
CVE-2026-93963 Vulnerability in itsourcecode Leave Management System (CVE-2026-93963)
CVE-2026-93960 Authentication Bypass in Pixelfed (CVE-2026-93960)
CVE-2026-93959 Vulnerability in SourceCodester Online Reviewer Management System (CVE-2026-93959)
CVE-2026-93957 Vulnerability in olivier-ls PHP-FTS (CVE-2026-93957)
CVE-2026-93956 Cross-Site Scripting (XSS) in olivier-ls PHP-FTS (CVE-2026-93956)
CVE-2026-93988 Path Traversal in QloApps (CVE-2026-93988)
CVE-2026-9858 Vulnerability in Partial Shipment for Woocommerce (WordPress plugin) (CVE-2026-9858)
CVE-2026-5410 Cross-Site Scripting (XSS) in Redux Framework (WordPress plugin) (CVE-2026-5410)
CVE-2026-76579 Cross-Site Scripting (XSS) in LiteSpeed Cache (WordPress plugin) (CVE-2026-76579)
CVE-2026-4327 Code Injection in Welcomizer (WordPress plugin) (CVE-2026-4327)
CVE-2026-19860 Vulnerability in JetFormBuilder — Dynamic Blocks Form Builder (WordPress plugin) (CVE-2026-19860)
CVE-2026-84750 Unrestricted File Upload in WordPress Apache (CVE-2026-84750)
CVE-2026-92967 Cross-Site Scripting (XSS) in Pochipp (WordPress plugin) (CVE-2026-92967)
CVE-2026-92807 Code Injection in Save as PDF Plugin by PDFCrowd (WordPress plugin) (CVE-2026-92807)
CVE-2026-93872 Unsafe Deserialization in Cotonti (CVE-2026-93872)
CVE-2026-93868 Vulnerability in Cotonti (CVE-2026-93868)
CVE-2026-71537 Vulnerability in paymenter/paymenter (CVE-2026-71537)
CVE-2026-93534 Vulnerability in spatie Scotty (CVE-2026-93534)
CVE-2026-93533 Command Injection in spatie Scotty (CVE-2026-93533)
CVE-2026-93532 Authentication Bypass in gedelumbung HospitalManagement (CVE-2026-93532)
CVE-2026-77929 Unrestricted File Upload in ClipBucket (CVE-2026-77929)
CVE-2026-77928 SQL Injection in ClipBucket (CVE-2026-77928)
CVE-2026-77927 SQL Injection in ClipBucket (CVE-2026-77927)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details