slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,016

Image ID Title
CVE-2026-45120 Vulnerability in MyBB (CVE-2026-45120)
CVE-2026-45119 Cross-Site Request Forgery (CSRF) in MyBB (CVE-2026-45119)
CVE-2026-74012 Unsafe Deserialization in TaxoPress (CVE-2026-74012)
CVE-2026-73376 Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.
CVE-2026-73380 Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions.
CVE-2026-73366 Unsafe Deserialization in Easy Google Maps (CVE-2026-73366)
CVE-2026-73341 Unsafe Deserialization in RegistrationMagic (CVE-2026-73341)
CVE-2026-32470 Unsafe Deserialization in FundEngine (CVE-2026-32470)
CVE-2026-66620 Unsafe Deserialization in OptionTree (CVE-2026-66620)
CVE-2026-75778 Vulnerability in code-projects Task Management System (CVE-2026-75778)
CVE-2026-32465 Unsafe Deserialization in Essential Real Estate (CVE-2026-32465)
CVE-2026-75827 Code Injection in getgrav/grav (CVE-2026-75827)
CVE-2026-75834 Cross-Site Scripting (XSS) in getgrav/grav (CVE-2026-75834)
CVE-2026-75835 Vulnerability in Grav API plugin (CVE-2026-75835)
CVE-2026-74907 Path Traversal in getgrav/grav (CVE-2026-74907)
CVE-2026-75088 Vulnerability in itsourcecode Hospital Management System (CVE-2026-75088)
CVE-2026-75089 Vulnerability in PHPGurukul Complaint Management System (CVE-2026-75089)
CVE-2026-75086 Vulnerability in itsourcecode Hospital Management System (CVE-2026-75086)
CVE-2026-75087 Vulnerability in itsourcecode Hospital Management System (CVE-2026-75087)
CVE-2026-75079 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-75079)
CVE-2026-75080 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-75080)
CVE-2026-75078 Cross-Site Scripting (XSS) in SourceCodester Class and Exam Timetabling System (CVE-2026-75078)
CVE-2026-67960 Code Injection in PbootCMS (CVE-2026-67960)
CVE-2026-75077 Cross-Site Scripting (XSS) in SourceCodester Class and Exam Timetabling System (CVE-2026-75077)
CVE-2026-75105 Vulnerability in phpIPAM (CVE-2026-75105)
CVE-2026-40506 Path Traversal in OpenEMR (CVE-2026-40506)
CVE-2026-75014 Vulnerability in SourceCodester Pet Grooming Management Software (CVE-2026-75014)
CVE-2026-50769 SQL Injection in CRM+ application before (CVE-2026-50769)
CVE-2026-59894 Code Injection in sqlparse (CVE-2026-59894)
CVE-2026-19998 Cross-Site Scripting (XSS) in code-projects Online Shopping System (CVE-2026-19998)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details