slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,005

Image ID Title
CVE-2026-84438 Cross-Site Scripting (XSS) in OpenCart (CVE-2026-84438)
CVE-2026-84437 Cross-Site Scripting (XSS) in OpenCart (CVE-2026-84437)
CVE-2026-84430 Vulnerability in gouguoa (CVE-2026-84430)
CVE-2026-84483 WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass...
CVE-2026-84481 Information Disclosure in WWBN AVideo (CVE-2026-84481)
CVE-2026-84480 Vulnerability in WWBN AVideo (CVE-2026-84480)
CVE-2026-84477 AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization,...
CVE-2026-84208 SQL Injection in AVideo through (CVE-2026-84208)
CVE-2026-84374 Path Traversal in maatwebsite/excel (CVE-2026-84374)
CVE-2026-84372 Vulnerability in predis/predis (CVE-2026-84372)
CVE-2026-84361 OS Command Injection in composer/composer (CVE-2026-84361)
CVE-2026-71981 Unsafe Deserialization in Cypht (CVE-2026-71981)
CVE-2026-84308 Vulnerability in phpseclib/phpseclib (CVE-2026-84308)
CVE-2026-84307 Vulnerability in filament/filament (CVE-2026-84307)
CVE-2026-84306 Vulnerability in filament/filament (CVE-2026-84306)
CVE-2026-84153 Vulnerability in Xinhu Rainrock RockOA (CVE-2026-84153)
CVE-2026-84111 Vulnerability in Chanjet CRM (CVE-2026-84111)
CVE-2026-84109 Vulnerability in Xinhu Rainrock RockOA (CVE-2026-84109)
CVE-2026-19513 Unrestricted File Upload in Gravity Forms (WordPress plugin) (CVE-2026-19513)
CVE-2026-84194 OS Command Injection in LibreNMS (CVE-2026-84194)
CVE-2026-84187 Vulnerability in AVideo (CVE-2026-84187)
CVE-2026-84192 Cross-Site Scripting (XSS) in LibreNMS (CVE-2026-84192)
CVE-2026-84188 Cross-Site Scripting (XSS) in LibreNMS (CVE-2026-84188)
CVE-2026-84193 Cross-Site Scripting (XSS) in LibreNMS (CVE-2026-84193)
CVE-2026-83595 Cross-Site Request Forgery (CSRF) in AVideo (CVE-2026-83595)
CVE-2026-83744 SSRF (Server-Side Request Forgery) in invoiceninja Invoice Ninja (CVE-2026-83744)
CVE-2026-19952 Path Traversal in Frontend Admin by DynamiApps (WordPress plugin) (CVE-2026-19952)
CVE-2026-83524 Vulnerability in RedPort Optimizer wXa-203 (CVE-2026-83524)
CVE-2026-82921 Vulnerability in ShopEx ECShop (CVE-2026-82921)
CVE-2026-82922 Vulnerability in ShopEx ECShop (CVE-2026-82922)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details