slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,978

Image ID Title
CVE-2026-109115 Vulnerability in AdithyaYelloju Restaurant-Management-System (CVE-2026-109115)
CVE-2026-89097 Information Disclosure in Ad Inserter – Ad Manager & AdSense Ads (WordPress plugin) (CVE-2026-89097)
CVE-2026-108975 Vulnerability in SourceCodester Library Management System (CVE-2026-108975)
CVE-2026-108973 Vulnerability in SourceCodester Contact Tracing System (CVE-2026-108973)
CVE-2026-108974 Vulnerability in SourceCodester E-Learning System (CVE-2026-108974)
CVE-2026-108972 Authentication Bypass in SourceCodester Human Resource Management System (CVE-2026-108972)
CVE-2026-108970 Vulnerability in itsmeravitejak Online-Examination-System (CVE-2026-108970)
CVE-2026-108968 Vulnerability in SourceCodester Performance Indicator System (CVE-2026-108968)
CVE-2026-108967 Vulnerability in SourceCodester Performance Indicator System (CVE-2026-108967)
CVE-2026-108969 Vulnerability in itsmeravitejak Online-Examination-System (CVE-2026-108969)
CVE-2026-108966 Vulnerability in SourceCodester Performance Indicator System (CVE-2026-108966)
CVE-2026-108965 Vulnerability in SourceCodester Performance Indicator System (CVE-2026-108965)
CVE-2026-108964 Vulnerability in SourceCodester Performance Indicator System (CVE-2026-108964)
CVE-2026-108959 Vulnerability in itsourcecode Online Cake Ordering System (CVE-2026-108959)
CVE-2026-108948 Vulnerability in code-projects Online Reviewer System (CVE-2026-108948)
CVE-2026-108956 Vulnerability in code-projects Online Reviewer System (CVE-2026-108956)
CVE-2026-54459 Cross-Site Request Forgery (CSRF) in FileRise (CVE-2026-54459)
CVE-2026-108927 Vulnerability in itsourcecode Baptism Information Management System (CVE-2026-108927)
CVE-2026-109378 SSRF (Server-Side Request Forgery) in SPIP (CVE-2026-109378)
CVE-2026-108928 Vulnerability in itsourcecode Online Admission System (CVE-2026-108928)
CVE-2026-108924 Vulnerability in getkirby Kirby (CVE-2026-108924)
CVE-2026-108926 Vulnerability in itsourcecode Baptism Information Management System (CVE-2026-108926)
CVE-2026-108920 Cross-Site Scripting (XSS) in SourceCodester Drug Recommendation System (CVE-2026-108920)
CVE-2026-108922 Vulnerability in KusalkaSilva Learning-Management-System (CVE-2026-108922)
CVE-2026-108921 Authentication Bypass in KusalkaSilva Learning-Management-System (CVE-2026-108921)
CVE-2026-108919 Cross-Site Scripting (XSS) in SourceCodester Drug Recommendation System (CVE-2026-108919)
CVE-2026-109305 Vulnerability in Craft CMS (CVE-2026-109305)
CVE-2026-109354 Path Traversal in LibreNMS (CVE-2026-109354)
CVE-2026-109352 Cross-Site Scripting (XSS) in LibreNMS (CVE-2026-109352)
CVE-2026-109353 SQL Injection in LibreNMS (CVE-2026-109353)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details