slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2020-15875 SQL Injection in LibreNMS (CVE-2020-15875)
CVE-2026-90575 Vulnerability in PHPGurukul Small CRM (CVE-2026-90575)
CVE-2026-90574 Vulnerability in itsourcecode Sales and Inventory System (CVE-2026-90574)
CVE-2026-90566 Vulnerability in Rizwan17 inventory-management-system (CVE-2026-90566)
CVE-2026-90565 Vulnerability in Rizwan17 inventory-management-system (CVE-2026-90565)
CVE-2026-90525 Vulnerability in itsourcecode Sales and Inventory System (CVE-2026-90525)
CVE-2026-90526 Vulnerability in SourceCodester School Registration and Fee System (CVE-2026-90526)
CVE-2026-90519 Vulnerability in PHPGurukul Bank Locker Management System (CVE-2026-90519)
CVE-2026-90517 Vulnerability in PHPGurukul Bank Locker Management System (CVE-2026-90517)
CVE-2026-90518 Vulnerability in PHPGurukul Bank Locker Management System (CVE-2026-90518)
CVE-2026-90516 Vulnerability in SourceCodester School Registration and Fee System (CVE-2026-90516)
CVE-2026-90515 Vulnerability in SourceCodester School Registration and Fee System (CVE-2026-90515)
CVE-2026-90514 Vulnerability in SourceCodester School Registration and Fee System (CVE-2026-90514)
CVE-2026-90497 Cross-Site Scripting (XSS) in Fengoffice Feng Office (CVE-2026-90497)
CVE-2026-90496 Vulnerability in Fengoffice Feng Office (CVE-2026-90496)
CVE-2026-90495 Vulnerability in Fengoffice Feng Office (CVE-2026-90495)
CVE-2026-90548 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user...
CVE-2026-90550 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to check user...
CVE-2026-90547 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user...
CVE-2026-90552 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist...
CVE-2026-90549 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to properly authorize...
CVE-2026-90540 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate watch...
CVE-2026-90542 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate that logged...
CVE-2026-90543 WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier, with the Live plugin...
CVE-2026-90544 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video...
CVE-2026-90541 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to require...
CVE-2026-90546 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video...
CVE-2026-90545 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video...
CVE-2026-90538 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing...
CVE-2026-90539 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details