slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,016

Image ID Title
CVE-2026-59256 WWBN AVideo through commit 9c39d8c8 contains an authorization bypass vulnerability where getToken...
CVE-2026-58003 WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the...
CVE-2026-58001 WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in...
CVE-2026-58002 WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization...
CVE-2026-57944 AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in...
CVE-2026-56380 AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php...
CVE-2026-76074 Vulnerability in WordPress (CVE-2026-76074)
CVE-2026-49849 Unrestricted File Upload in Laravel (CVE-2026-49849)
CVE-2026-34836 Combodo iTop is a web based IT service management tool. Prior to 3.2.3, improper access control in ajax.render.php and…
CVE-2026-34741 Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated…
CVE-2026-31803 Combodo iTop is a web based IT service management tool. Prior to 3.2.3, 3.2.3, there is a Reflected Cross-Site…
CVE-2026-63135 Cross-Site Scripting (XSS) in yourls/yourls (CVE-2026-63135)
CVE-2026-59989 Code Injection in phalcon/cphalcon (CVE-2026-59989)
CVE-2026-74252 Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4...
CVE-2026-30819 Cross-Site Scripting (XSS) in /pages/ajax.render.php (CVE-2026-30819)
CVE-2026-77686 Vulnerability in Dolibarr (CVE-2026-77686)
CVE-2026-77681 Vulnerability in CodeAstro Online Job Portal (CVE-2026-77681)
CVE-2026-77392 Vulnerability in SourceCodester Dynamic Input Field Generator Using HTML (CVE-2026-77392)
CVE-2026-77391 Cross-Site Request Forgery (CSRF) in SourceCodester Dynamic Input Field Generator Using HTML (CVE-2026-77391)
CVE-2026-77647 Code Injection in SPIP (CVE-2026-77647)
CVE-2026-50190 Cross-Site Scripting (XSS) in Shaarli (CVE-2026-50190)
CVE-2026-63179 Path Traversal in winter/wn-backend-module (CVE-2026-63179)
CVE-2026-54256 Vulnerability in winter/wn-backend-module (CVE-2026-54256)
CVE-2026-54182 Vulnerability in backpack/crud (CVE-2026-54182)
CVE-2026-54181 Cross-Site Scripting (XSS) in backpack/crud (CVE-2026-54181)
CVE-2026-54179 Cross-Site Scripting (XSS) in backpack/crud (CVE-2026-54179)
CVE-2026-54178 Path Traversal in backpack/crud (CVE-2026-54178)
CVE-2026-54177 Unrestricted File Upload in backpack/crud (CVE-2026-54177)
CVE-2026-54175 Vulnerability in backpack/crud (CVE-2026-54175)
CVE-2026-77019 Vulnerability in CodeAstro Apartment Visitor Management System (CVE-2026-77019)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details