slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,005

Image ID Title
CVE-2026-85516 Vulnerability in code-projects Vehicle Management System (CVE-2026-85516)
CVE-2026-85604 Code Injection in Grav (CVE-2026-85604)
CVE-2026-85577 AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in...
CVE-2026-85512 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-85512)
CVE-2026-82923 Vulnerability in AI Website Builder (WordPress plugin) (CVE-2026-82923)
CVE-2026-81347 Vulnerability in Frontend Admin by DynamiApps (WordPress plugin) (CVE-2026-81347)
CVE-2026-11613 Vulnerability in Divi Ajax Filter (WordPress plugin) (CVE-2026-11613)
CVE-2026-85403 Vulnerability in code-projects Doctor Appointment System (CVE-2026-85403)
CVE-2026-85399 Vulnerability in code-projects Hospital Information System (CVE-2026-85399)
CVE-2026-85398 Vulnerability in code-projects Hospital Information System (CVE-2026-85398)
CVE-2026-85401 Vulnerability in Dolibarr (CVE-2026-85401)
CVE-2026-85402 Vulnerability in code-projects Doctor Appointment System (CVE-2026-85402)
CVE-2026-85383 Vulnerability in itsourcecode Sales and Inventory System (CVE-2026-85383)
CVE-2026-85397 Vulnerability in code-projects Hospital Information System (CVE-2026-85397)
CVE-2026-85380 SSRF (Server-Side Request Forgery) in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d (CVE-2026-85380)
CVE-2026-85379 Vulnerability in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d (CVE-2026-85379)
CVE-2026-85381 Vulnerability in light0011 cms (CVE-2026-85381)
CVE-2026-85378 Vulnerability in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d (CVE-2026-85378)
CVE-2026-85225 Vulnerability in code-projects Doctor Appointment System (CVE-2026-85225)
CVE-2026-85208 Vulnerability in itsourcecode Online Medicine Delivery System (CVE-2026-85208)
CVE-2026-85207 Cross-Site Scripting (XSS) in itsourcecode Online Medicine Delivery System (CVE-2026-85207)
CVE-2026-85205 Vulnerability in itsourcecode Online Medicine Delivery System (CVE-2026-85205)
CVE-2026-84968 Out-of-Bounds Read in MongoDB Php Driver (CVE-2026-84968)
CVE-2026-85187 Vulnerability in itsourcecode Online Medicine Delivery System (CVE-2026-85187)
CVE-2026-85186 Vulnerability in itsourcecode Online Medicine Delivery System (CVE-2026-85186)
CVE-2026-84834 Unsafe Deserialization in JobSearch (CVE-2026-84834)
CVE-2026-84753 Unsafe Deserialization in Mail Mint (CVE-2026-84753)
CVE-2026-84752 Unsafe Deserialization in RTMKit (CVE-2026-84752)
CVE-2026-85137 Vulnerability in SeaCMS (CVE-2026-85137)
CVE-2026-85138 Vulnerability in SeaCMS (CVE-2026-85138)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details