slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,992

Image ID Title
CVE-2026-88623 Vulnerability in NUUO Network Video Recorder (CVE-2026-88623)
CVE-2026-88622 Command Injection in NUUO Network Video Recorder (CVE-2026-88622)
CVE-2026-92619 Privilege Escalation in Booking Calendar (WordPress plugin) (CVE-2026-92619)
CVE-2026-88994 Vulnerability in WordPress (CVE-2026-88994)
CVE-2026-17576 SQL Injection in InfiniteWP Client (WordPress plugin) (CVE-2026-17576)
CVE-2026-84738 Code Injection in AF Companion (WordPress plugin) (CVE-2026-84738)
CVE-2026-17086 Unsafe Deserialization in WordPress (CVE-2026-17086)
CVE-2026-54671 Vulnerability in WeGIA (CVE-2026-54671)
CVE-2026-54767 Vulnerability in WeGIA (CVE-2026-54767)
CVE-2026-54643 Vulnerability in CubeCart (CVE-2026-54643)
CVE-2026-54644 Cross-Site Scripting (XSS) in CubeCart (CVE-2026-54644)
CVE-2026-54645 Cross-Site Scripting (XSS) in CubeCart (CVE-2026-54645)
CVE-2026-54648 Vulnerability in CubeCart (CVE-2026-54648)
CVE-2026-54646 SQL Injection in CubeCart (CVE-2026-54646)
CVE-2026-54647 SQL Injection in CubeCart (CVE-2026-54647)
CVE-2026-54670 Path Traversal in WeGIA (CVE-2026-54670)
CVE-2026-54608 Vulnerability in MythicalDash is a Pterodactyl client area. In (CVE-2026-54608)
CVE-2026-54612 Path Traversal in Vvveb (CVE-2026-54612)
CVE-2026-54613 Path Traversal in Vvveb (CVE-2026-54613)
CVE-2026-54642 Cross-Site Request Forgery (CSRF) in CubeCart (CVE-2026-54642)
CVE-2026-54507 SSRF (Server-Side Request Forgery) in Vvveb (CVE-2026-54507)
CVE-2026-54506 Cross-Site Scripting (XSS) in Vvveb (CVE-2026-54506)
CVE-2026-54596 ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to…
CVE-2026-54597 ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to…
CVE-2026-50275 The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2…
CVE-2026-54237 Code Injection in Wavelog (CVE-2026-54237)
CVE-2026-54239 Vulnerability in WordPress Faust.js (CVE-2026-54239)
CVE-2026-92926 Vulnerability in code-projects Matrimonial System (CVE-2026-92926)
CVE-2026-54053 Path Traversal in Many Notes (CVE-2026-54053)
CVE-2026-93295 Vulnerability in MISP (CVE-2026-93295)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details