slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,985

Image ID Title
CVE-2026-110284 Vulnerability in WordPress (CVE-2026-110284)
CVE-2026-104764 Unsafe Deserialization in WordPress (CVE-2026-104764)
CVE-2026-104909 Vulnerability in Mang Board (WordPress plugin) (CVE-2026-104909)
CVE-2026-103367 Vulnerability in ShopMagic – email automation for (WordPress plugin) (CVE-2026-103367)
CVE-2026-86787 Code Injection in affiliate-toolkit (WordPress plugin) (CVE-2026-86787)
CVE-2026-83592 Cross-Site Scripting (XSS) in Contact Form DB for Enfold (WordPress plugin) (CVE-2026-83592)
CVE-2026-104800 Unrestricted File Upload in AGE-GATE (WordPress plugin) (CVE-2026-104800)
CVE-2026-110447 OS Command Injection in Collabora Online Built-in CODE Server (CVE-2026-110447)
CVE-2026-110002 Unrestricted File Upload in Snazzy Social Media Feed (WordPress plugin) (CVE-2026-110002)
CVE-2026-93388 Unrestricted File Upload in WordPress (CVE-2026-93388)
CVE-2026-104995 Vulnerability in BP Profile Search (WordPress plugin) (CVE-2026-104995)
CVE-2026-63165 SQL Injection in Omnispace Agora Project (CVE-2026-63165)
CVE-2026-63149 Vulnerability in Omnispace Agora Project (CVE-2026-63149)
CVE-2026-63152 SQL Injection in Omnispace Agora Project (CVE-2026-63152)
CVE-2026-63156 Cross-Site Scripting (XSS) in Omnispace Agora Project (CVE-2026-63156)
CVE-2026-63146 Code Injection in Omnispace Agora Project (CVE-2026-63146)
CVE-2026-104937 Vulnerability in Shopware (CVE-2026-104937)
CVE-2026-37107 Privilege Escalation in HTMLy (CVE-2026-37107)
CVE-2026-109620 Vulnerability in SourceCodester Online Reviewer System (CVE-2026-109620)
CVE-2026-109607 Vulnerability in SourceCodester Online Exam System (CVE-2026-109607)
CVE-2026-109606 Vulnerability in SourceCodester Art Gallery Management System (CVE-2026-109606)
CVE-2026-85990 Privilege Escalation in leantime/leantime (CVE-2026-85990)
CVE-2026-85733 Information Disclosure in FrankenPHP (CVE-2026-85733)
CVE-2026-82416 Vulnerability in github.com/dunglas/frankenphp (CVE-2026-82416)
CVE-2026-54454 Unrestricted File Upload in OpenCATS (CVE-2026-54454)
CVE-2026-55695 FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an…
CVE-2026-110025 Vulnerability in slackero phpwcms (CVE-2026-110025)
CVE-2026-109525 Vulnerability in girishsaraf Online-Appointment-Booking-System (CVE-2026-109525)
CVE-2026-109605 Vulnerability in SourceCodester Simple Cafe Billing System (CVE-2026-109605)
CVE-2026-109524 Vulnerability in girishsaraf Online-Appointment-Booking-System (CVE-2026-109524)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details