slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2026-90841 Vulnerability in PHPGurukul Blood Donor Management System (CVE-2026-90841)
CVE-2026-90842 Vulnerability in PHPGurukul Blood Donor Management System (CVE-2026-90842)
CVE-2026-90840 Authentication Bypass in PHPGurukul Blood Donor Management System (CVE-2026-90840)
CVE-2026-90805 Vulnerability in subhajitkhan online-clinic-management-system (CVE-2026-90805)
CVE-2026-49400 Unsafe Deserialization in october/system (CVE-2026-49400)
CVE-2026-46696 Privilege Escalation in october/system (CVE-2026-46696)
CVE-2026-90796 Vulnerability in itsourcecode Leave Management System (CVE-2026-90796)
CVE-2026-61701 Unsafe Deserialization in Laravel (CVE-2026-61701)
CVE-2026-55416 SQL Injection in pimcore/pimcore (CVE-2026-55416)
CVE-2026-90795 Cross-Site Scripting (XSS) in itsourcecode Loan Management System (CVE-2026-90795)
CVE-2026-90789 Vulnerability in itsourcecode Leave Management System (CVE-2026-90789)
CVE-2026-90788 Command Injection in magicblack MacCMS10 (CVE-2026-90788)
CVE-2026-90936 Information Disclosure in Froxlor (CVE-2026-90936)
CVE-2024-58383 Vulnerability in Froxlor (CVE-2024-58383)
CVE-2026-90709 Vulnerability in Yot CMS (CVE-2026-90709)
CVE-2026-90708 Vulnerability in Yot CMS (CVE-2026-90708)
CVE-2026-81564 Path Traversal in Media Rename Allowing (CVE-2026-81564)
CVE-2026-90701 Vulnerability in subhajitkhan online-clinic-management-system (CVE-2026-90701)
CVE-2026-90697 Vulnerability in SourceCodester Inventory Management System (CVE-2026-90697)
CVE-2026-90700 Vulnerability in itsourcecode Sales and Inventory System (CVE-2026-90700)
CVE-2026-90696 Cross-Site Scripting (XSS) in SourceCodester Inventory Management System (CVE-2026-90696)
CVE-2026-90695 Cross-Site Scripting (XSS) in SourceCodester Inventory Management System (CVE-2026-90695)
CVE-2026-90694 Cross-Site Scripting (XSS) in SourceCodester Inventory Management System (CVE-2026-90694)
CVE-2026-85192 Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in...
CVE-2023-24034 Open Redirect in Nagios XI (CVE-2023-24034)
CVE-2026-90615 Cross-Site Scripting (XSS) in SourceCodester Class and Exam Timetabling System (CVE-2026-90615)
CVE-2026-90600 Vulnerability in itsourcecode Sales and Inventory System (CVE-2026-90600)
CVE-2026-90599 Cross-Site Request Forgery (CSRF) in Rizwan17 inventory-management-system (CVE-2026-90599)
CVE-2026-90597 Vulnerability in itsourcecode Sales and Inventory System (CVE-2026-90597)
CVE-2026-36989 SQL Injection in LuxSoft LuxCal (CVE-2026-36989)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details