slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,996

Image ID Title
CVE-2026-90539 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing...
CVE-2026-78006 Unsafe Deserialization in Events Calendar (WordPress plugin) (CVE-2026-78006)
CVE-2026-78175 Unsafe Deserialization in Tutor LMS – eLearning and online course solution (WordPress plugin) (CVE-2026-78175)
CVE-2026-85200 Vulnerability in GEO my WP (WordPress plugin) (CVE-2026-85200)
CVE-2026-84099 Unsafe Deserialization in wpstorecart (WordPress plugin) (CVE-2026-84099)
CVE-2026-82845 Unsafe Deserialization in Masteriyo LMS (WordPress plugin) (CVE-2026-82845)
CVE-2026-81402 Unrestricted File Upload in DS Ad Rotator (WordPress plugin) (CVE-2026-81402)
CVE-2026-81090 Cross-Site Request Forgery (CSRF) in Gpx2Graphics (WordPress plugin) (CVE-2026-81090)
CVE-2026-56826 Vulnerability in shopper/framework (CVE-2026-56826)
CVE-2026-81907 Cross-Site Request Forgery (CSRF) in Concrete CMS (CVE-2026-81907)
CVE-2026-68526 Cross-Site Request Forgery (CSRF) in Concrete CMS (CVE-2026-68526)
CVE-2026-53952 Vulnerability in GetSimple CMS (CVE-2026-53952)
CVE-2026-52630 SQL Injection in Woltlab WCF v.6.2.4 and (CVE-2026-52630)
CVE-2026-81910 Vulnerability in Concrete CMS (CVE-2026-81910)
CVE-2026-79362 Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and...
CVE-2026-62105 Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.
CVE-2026-62103 Unsafe Deserialization in Everest Forms (CVE-2026-62103)
CVE-2026-62107 Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.
CVE-2026-81908 Vulnerability in Concrete CMS (CVE-2026-81908)
CVE-2026-81909 Vulnerability in Concrete CMS (CVE-2026-81909)
CVE-2026-72710 Vulnerability in SPIP (CVE-2026-72710)
CVE-2026-89013 Authorization Flaw in Dolibarr (CVE-2026-89013)
CVE-2026-15439 SQL Injection in GamiPress (WordPress plugin) (CVE-2026-15439)
CVE-2026-89257 Vulnerability in AVideo (CVE-2026-89257)
CVE-2026-89253 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site...
CVE-2026-89252 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in...
CVE-2026-89250 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated...
CVE-2026-89251 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions...
CVE-2026-89254 Cross-Site Scripting (XSS) in CustomizeUser plugin (CVE-2026-89254)
CVE-2026-89244 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details