slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,171

Image ID Title
CVE-2026-19894 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19894)
CVE-2026-18438 Unrestricted File Upload in WordPress (CVE-2026-18438)
CVE-2026-14279 Privilege Escalation in Wholesale Market (WordPress plugin) (CVE-2026-14279)
CVE-2026-16145 Cross-Site Scripting (XSS) in WordPress (CVE-2026-16145)
CVE-2026-15162 SQL Injection in WordPress (CVE-2026-15162)
CVE-2026-14484 Path Traversal in WordPress (CVE-2026-14484)
CVE-2026-73683 Vulnerability in Laravel Socialite (CVE-2026-73683)
CVE-2026-73680 OS Command Injection in Cockpit CMS (CVE-2026-73680)
CVE-2026-73679 Code Injection in ImpressCMS (CVE-2026-73679)
CVE-2026-19839 Vulnerability in SourceCodester Simple Doctors Appointment System (CVE-2026-19839)
CVE-2026-73850 Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the…
CVE-2026-73847 Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant…
CVE-2026-73849 Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without…
CVE-2026-19825 Vulnerability in SourceCodester Simple Client Management System (CVE-2026-19825)
CVE-2026-72832 Cross-Site Scripting (XSS) in getgrav/grav (CVE-2026-72832)
CVE-2026-72819 Code Injection in getgrav/grav (CVE-2026-72819)
CVE-2026-19794 Cross-Site Scripting (XSS) in WP-Stats (WordPress plugin) (CVE-2026-19794)
CVE-2026-19786 Cross-Site Request Forgery (CSRF) in francoisjacquet RosarioSIS (CVE-2026-19786)
CVE-2026-19787 Vulnerability in SourceCodester Air Cargo Management System (CVE-2026-19787)
CVE-2026-19784 Vulnerability in francoisjacquet RosarioSIS (CVE-2026-19784)
CVE-2026-19785 Vulnerability in francoisjacquet RosarioSIS (CVE-2026-19785)
CVE-2026-19767 Vulnerability in itsourcecode Hospital Management System (CVE-2026-19767)
CVE-2026-19764 A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform...
CVE-2026-73664 Privilege Escalation in FreePBX (CVE-2026-73664)
CVE-2026-73663 SQL Injection in Sangoma Freepbx (CVE-2026-73663)
CVE-2026-73662 OS Command Injection in Sangoma Freepbx (CVE-2026-73662)
CVE-2026-73661 Vulnerability in Sangoma Freepbx (CVE-2026-73661)
CVE-2026-73482 Cross-Site Request Forgery (CSRF) in phpList (CVE-2026-73482)
CVE-2026-73481 Cross-Site Request Forgery (CSRF) in phpList (CVE-2026-73481)
CVE-2026-73670 SQL Injection in CMS (CVE-2026-73670)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details