slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,005

Image ID Title
CVE-2026-85212 Vulnerability in CRMEB (CVE-2026-85212)
CVE-2026-85177 Vulnerability in CRMEB (CVE-2026-85177)
CVE-2026-85135 Vulnerability in ILIAS (CVE-2026-85135)
CVE-2026-56127 pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules:...
CVE-2026-56128 pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall:...
CVE-2026-56126 pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status:...
CVE-2026-85161 AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in...
CVE-2026-85162 AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in plugin...
CVE-2026-85160 AVideo through commit c91b5975d contains a cross-site request forgery and path traversal...
CVE-2026-85159 AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in...
CVE-2026-85155 SQL Injection in WWBN AVideo (CVE-2026-85155)
CVE-2026-85157 Information Disclosure in WWBN AVideo (CVE-2026-85157)
CVE-2026-85158 AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in...
CVE-2026-76176 SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to...
CVE-2026-77999 Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order...
CVE-2026-76174 Unrestricted File Upload in Ocsreports (CVE-2026-76174)
CVE-2026-3852 Cross-Site Scripting (XSS) in Divi (WordPress theme) (CVE-2026-3852)
CVE-2026-82524 Unrestricted File Upload in UnoPim (CVE-2026-82524)
CVE-2026-77009 Code Injection in WatchMan-Site7 (WordPress plugin) (CVE-2026-77009)
CVE-2026-4357 Unrestricted File Upload in Embed HTML5 Game (WordPress plugin) (CVE-2026-4357)
CVE-2026-10821 Vulnerability in WordPress Apache (CVE-2026-10821)
CVE-2023-3360 Unsafe Deserialization in Weaver Show Posts (WordPress plugin) (CVE-2023-3360)
CVE-2026-81772 Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions.
CVE-2026-81283 Unsafe Deserialization in WP User Frontend (CVE-2026-81283)
CVE-2026-3850 Cross-Site Scripting (XSS) in Divi (WordPress theme) (CVE-2026-3850)
CVE-2026-78657 Path Traversal in SigmaForms Pro – AI Generated Forms (WordPress plugin) (CVE-2026-78657)
CVE-2026-14357 Vulnerability in DevKit Pro (WordPress plugin) (CVE-2026-14357)
CVE-2026-19116 Unsafe Deserialization in WordPress (CVE-2026-19116)
CVE-2026-14982 Path Traversal in WP File Download (WordPress plugin) (CVE-2026-14982)
CVE-2026-84441 Path Traversal in Piwigo (CVE-2026-84441)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details